CVE

Id
58212  
CVE No.
CVE-2012-4969  
Status
Candidate  
Description
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.  
Phase
Assigned (20120918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597656 58212 CVE-2012-4969 MISC:http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/  View
597657 58212 CVE-2012-4969 MISC:http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb  View
597658 58212 CVE-2012-4969 MISC:http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/  View
597659 58212 CVE-2012-4969 MISC:http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild  View
597660 58212 CVE-2012-4969 CONFIRM:http://technet.microsoft.com/security/advisory/2757760  View
597661 58212 CVE-2012-4969 CERT:TA12-262A  View
597662 58212 CVE-2012-4969 URL:http://www.us-cert.gov/cas/techalerts/TA12-262A.html  View
597663 58212 CVE-2012-4969 CERT:TA12-265A  View
597664 58212 CVE-2012-4969 URL:http://www.us-cert.gov/cas/techalerts/TA12-265A.html  View
597665 58212 CVE-2012-4969 CERT:TA12-255A  View
597666 58212 CVE-2012-4969 URL:http://www.us-cert.gov/cas/techalerts/TA12-255A.html  View
597667 58212 CVE-2012-4969 CERT-VN:VU#480095  View
597668 58212 CVE-2012-4969 URL:http://www.kb.cert.org/vuls/id/480095  View
597669 58212 CVE-2012-4969 OVAL:oval:org.mitre.oval:def:15729  View
597670 58212 CVE-2012-4969 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15729  View
597671 58212 CVE-2012-4969 SECTRACK:1027538  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30002 JVNDB-2012-005709 Layton Helpbox における権限を取得される脆弱性 Layton Helpbox には、ログインコンテキストを変更され、権限を取得される脆弱性が存在します。 CVE-2012-4974 58212 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005709.html  View