CVE-2012-1879

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."

Score

CVSS 3.1 8.1 High

Status

Modified - secure@microsoft.com

Published

2012-06-12

Last modified

2024-10-17

Weaknesses

CWE-94

Affected products

• Internet Explorer (Microsoft)

References

• http://www.us-cert.gov/cas/techalerts/TA12-164A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-037
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15588