CVE-2012-4969 Microsoft Internet Explorer Use-After-Free
Remote attackers can execute arbitrary code via a crafted website due to a use-after-free flaw in Internet Explorer's mshtml.dll component.
- Exploited in the wild
- Since 8 Jun 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4969?
CVE-2012-4969 is a high-severity use after free vulnerability in Microsoft Internet Explorer, published on 18 Sep 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
Weakness: CWE-416
Which versions are affected by CVE-2012-4969?
It affects 1 product.
Products include Microsoft Internet Explorer.
How do I fix CVE-2012-4969?
No fix has been published for CVE-2012-4969 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 22 Jun 2022.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2012-4969 being exploited?
Yes. Attackers have exploited CVE-2012-4969 in the wild since at least 8 Jun 2022.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Microsoft Internet Explorer
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption
- CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution
- CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution
- CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation
- CVE-2017-0149 Microsoft Internet Explorer Memory Corruption
Sources
Also known as GHSA-xvh2-pw6x-f8hh.