CVE-2012-1879 Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "i...
HighCVSS 9.3
EPSS 19.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 7 | No fix listed |
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 9 | No fix listed |
| Microsoft internet explorer | = 6 | No fix listed |
| Microsoft internet explorer | >= 6.0, <= 9.0 | No fix listed |
References
- TA12-164A third-party-advisory us-government-resource
- MS12-037 vendor-advisory
- oval:org.mitre.oval:def:15588 signature vdb-entry