PT-2012-3613 · Microsoft · Internet Explorer

Masato Kinugawa · Published 2012-06-12 · Updated 2025-01-21 · CVE-2012-1872

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 9

Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding. This could result in information disclosure when a user views a website with specially crafted strings inserted by an attacker.

Recommendations For Microsoft Internet Explorer versions 6 through 9, consider disabling the use of EUC-JP encoding as a temporary workaround until a patch is available. Restrict access to websites that may contain specially crafted strings to minimize the risk of exploitation. Avoid using websites with potentially crafted character sequences in the affected browser versions until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-1872

Affected Products

Internet Explorer

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1872 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1872 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-037 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15629 · Note
• https://t.me/cvenotify/108130 · Telegram Post