CVE

Id
58035  
CVE No.
CVE-2012-4792  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
596830 58035 CVE-2012-4792 MISC:https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb  View
596831 58035 CVE-2012-4792 MISC:http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html  View
596832 58035 CVE-2012-4792 MISC:http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/  View
596833 58035 CVE-2012-4792 MISC:http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/  View
596834 58035 CVE-2012-4792 MISC:http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html  View
596835 58035 CVE-2012-4792 CONFIRM:http://technet.microsoft.com/security/advisory/2794220  View
596836 58035 CVE-2012-4792 CONFIRM:http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx  View
596837 58035 CVE-2012-4792 CONFIRM:http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx  View
596838 58035 CVE-2012-4792 MS:MS13-008  View
596839 58035 CVE-2012-4792 URL:http://technet.microsoft.com/security/bulletin/MS13-008  View
596840 58035 CVE-2012-4792 CERT:TA13-008A  View
596841 58035 CVE-2012-4792 URL:http://www.us-cert.gov/cas/techalerts/TA13-008A.html  View
596842 58035 CVE-2012-4792 CERT:TA13-015A  View
596843 58035 CVE-2012-4792 URL:http://www.us-cert.gov/cas/techalerts/TA13-015A.html  View
596844 58035 CVE-2012-4792 CERT-VN:VU#154201  View
596845 58035 CVE-2012-4792 URL:http://www.kb.cert.org/vuls/id/154201  View
596846 58035 CVE-2012-4792 OVAL:oval:org.mitre.oval:def:16361  View

Related JVN