Back to CVE Browser

CVE-2012-4792

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score80.5300%

EPSS Percentile88.52th

PublishedDec 30, 2012

Last ModifiedApr 22, 2026

Vulnerability Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

Affected Platforms (CPE)

📦

Microsoft

Internet Explorer

= 6

📦

Microsoft

Internet Explorer

= 7

📦

Microsoft

Internet Explorer

= 8

References & Advisories

🔗 http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html

🔗 http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx

🔗 http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx

🔗 http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/

🔗 http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/

🔗 http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html

🔗 http://technet.microsoft.com/security/advisory/2794220

🔗 http://www.kb.cert.org/vuls/id/154201

Related Vulnerabilities

CVE-1999-046510.0

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

CVE-1999-034710.0

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javasc...

CVE-1999-096710.0

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource p...

CVE-1999-124110.0

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web...