CVE-2012-1526 Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is de...
HighCVSS 9.3
EPSS 20.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
References
- TA12-227A third-party-advisory us-government-resource
- MS12-052 vendor-advisory
- oval:org.mitre.oval:def:15240 signature vdb-entry