CVE-2012-4792 Microsoft Internet Explorer Use-After-Free

What is CVE-2012-4792?

CVE-2012-4792 is a high-severity use after free vulnerability in Microsoft Internet Explorer, published on 30 Dec 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

Weakness: CWE-416

Which versions are affected by CVE-2012-4792?

It affects 1 product.

Products include Microsoft Internet Explorer.

How do I fix CVE-2012-4792?

No fix has been published for CVE-2012-4792 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 13 Aug 2024.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2012-4792 being exploited?

Yes. Attackers have exploited CVE-2012-4792 in the wild since at least 23 Jul 2024.

Public exploit code: 1 Metasploit module, 2 Exploit-DB entries and 1 proofs of concept on GitHub.

Other vulnerabilities in Microsoft Internet Explorer

• CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Exploited Critical 9.8
• CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution Exploited High 8.8
• CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution Exploited High 8.8
• CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Exploited High 8.8
• CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Exploited High 8.8

All Microsoft Internet Explorer vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c5c8-vqpp-hm75.