CVE-2012-4792highunder attackCWE-416

CVE-2012-4792

Published · Updated

Follow this CVE+ Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.

ssvc Actcvss 8.8epss 79%
from disclosure to weapon1 day
Published on NVDDec 30
1st PoC+1d
metasploitDec 27
CISA KEV+4223d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAxiom🇨🇳 MITRE ATT&CK
Action required by CISAfederal deadline: 2024-08-13

The impacted product is end-of-life and should be disconnected if still in use.

In short

Internet Explorer 6-8 has a use-after-free bug where a malicious website can trick the browser into accessing memory that was already freed, allowing attackers to run arbitrary code on your computer.

Technical detail

A use-after-free vulnerability in Internet Explorer 6-8 allows remote attackers to execute arbitrary code by crafting a web page that references a freed object (such as CDwnBindInfo), exploiting memory management flaws. The attack requires only that a user visits a malicious website; no additional user interaction or authentication is needed, resulting in complete system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.