CVE-2012-2557

Related Files

Zero Day Initiative Advisory 12-198

Posted Dec 22, 2012

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 12-198 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Internet Explorer handles CMarkup objects. By manipulating a document's elements an attacker can force a dangling pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute code under the context of the current process.

tags | advisory, remote, arbitrary

advisories | CVE-2012-2557

SHA-256 | 33a9236b2bbf00faa400719f894ebd849a2e58e54865fdb6c31d0a6035ea1166

Download | Favorite | View