NVD

Id
46093  
Name
CVE-2012-4792  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-12-30  
Modified Date
2013-11-02  
Seq
2012-4792  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231275 46093 CVE-2012-4792 http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html  View
231276 46093 CVE-2012-4792 http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx  View
231277 46093 CVE-2012-4792 http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx  View
231278 46093 CVE-2012-4792 http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/  View
231279 46093 CVE-2012-4792 http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/  View
231280 46093 CVE-2012-4792 oval:org.mitre.oval:def:16361  View
231281 46093 CVE-2012-4792 http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html  View
231282 46093 CVE-2012-4792 http://technet.microsoft.com/security/advisory/2794220  View
231283 46093 CVE-2012-4792 MS13-008  View
231284 46093 CVE-2012-4792 VU#154201  View
231285 46093 CVE-2012-4792 TA13-008A  View
231286 46093 CVE-2012-4792 TA13-015A  View
231287 46093 CVE-2012-4792 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30121 JVNDB-2012-005828 Internet Explorer に任意のコードが実行される脆弱性 Internet Explorer には、解放済みメモリ使用 (use-after-free) の脆弱性が存在します。 CVE-2012-4792 58030 CVE-2012-4792 46093 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005828.html 2012-12-29 2015-05-11 View