CVE-2012-0169

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

History

01 Mar 2022, 16:33

Type Values Removed Values Added
CPE cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15611 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15611 - Tool Signature
References (CERT) http://www.us-cert.gov/cas/techalerts/TA12-101A.html - US Government Resource (CERT) http://www.us-cert.gov/cas/techalerts/TA12-101A.html - Third Party Advisory, US Government Resource
References (SECTRACK) http://www.securitytracker.com/id?1026901 - (SECTRACK) http://www.securitytracker.com/id?1026901 - Broken Link, Third Party Advisory, VDB Entry
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-023 - Patch, Vendor Advisory
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/74380 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/74380 - Third Party Advisory, VDB Entry
References (OSVDB) http://osvdb.org/81127 - (OSVDB) http://osvdb.org/81127 - Broken Link
References (BID) http://www.securityfocus.com/bid/52902 - (BID) http://www.securityfocus.com/bid/52902 - Broken Link, Third Party Advisory, VDB Entry
First Time Microsoft windows Vista
Microsoft windows Server 2008
Microsoft windows 7

23 Jul 2021, 15:12

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:ie:9:*:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

Information

Published : 2012-04-10 21:55

Updated : 2023-12-10 11:16


NVD link : CVE-2012-0169

Mitre link : CVE-2012-0169

CVE.ORG link : CVE-2012-0169


JSON object : View

Products Affected

microsoft

  • windows_7
  • windows_vista
  • internet_explorer
  • windows_server_2008
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')