PT-2012-4080 · Microsoft · Internet Explorer

Cris Neckar · Publicado 2012-08-15 · Atualizado 2018-10-12 · CVE-2012-2523

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8 through 9

Description The issue is related to an integer overflow that occurs during object copying due to an incorrect size calculation, allowing remote attackers to execute arbitrary code. This can lead to memory corruption, enabling an attacker to execute arbitrary code in the context of the current user.

Recommendations For Microsoft Internet Explorer versions 8 through 9, update to a version that includes the fix for the integer overflow issue to prevent remote code execution.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2012-2523

Produtos afetados

Internet Explorer

Referências · 7

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15790 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2523 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-056 · Aviso do Fabricante
• http://technet.microsoft.com/en-us/security/bulletin/ms12-052 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-052 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA12-227A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2523 · Nota de Segurança