CyberSec.Space Logo
Back to CVE Browser

CVE-2012-4969

Known Exploited (CISA KEV)HIGH
8.1
CVSS Severity Score
EPSS Score44.6540%
EPSS Percentile91.02th
PublishedSep 18, 2012
Last ModifiedApr 21, 2026

Vulnerability Description

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

Affected Platforms (CPE)

📦
Microsoft

Internet Explorer

= 6
📦
Microsoft

Internet Explorer

= 7
📦
Microsoft

Internet Explorer

= 8
📦
Microsoft

Internet Explorer

= 9

References & Advisories

🔗 http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/
🔗 http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb
🔗 http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/
🔗 http://technet.microsoft.com/security/advisory/2757760
🔗 http://www.kb.cert.org/vuls/id/480095
🔗 http://www.securitytracker.com/id?1027538
🔗 http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild
🔗 http://www.us-cert.gov/cas/techalerts/TA12-255A.html

Related Vulnerabilities

CVE-1999-046510.0

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

CVE-1999-034710.0

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javasc...

CVE-1999-096710.0

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource p...

CVE-1999-124110.0

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web...