9.3
CVSSv2

CVE-2012-4969

Published: 18/09/2012 Updated: 21/11/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote malicious users to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet_explorer 6

microsoft internet_explorer 7

microsoft internet_explorer 8

microsoft internet_explorer 9

Exploits

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = GoodRanking inclu ...

Recent Articles

Chinese chap collared, charged over massive US Office of Personnel Management hack
The Register • Iain Thomson in San Francisco • 25 Aug 2017

Fingers pointed at Yu Pingan & unnamed conspirators in PRC

A Chinese fella has been accused by the FBI of being a key team member in the hacking crew that took down the US Office of Personnel Management (OPM). Yu Pingan was cuffed at Los Angeles international airport by the Feds and this week charged with computer hacking. The OPM infiltration, first discovered in 2015, was a massive embarrassment to the US government. Hackers stole paperwork for security background checks on 21.56 million individuals – including the fingerprint records for 5.6 millio...