CVE-2012-0155

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 14-02-2012 11:55

Last modified: - 01-03-2022 05:30

Total changes: - 2

Description

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

9.3

Base score

8.6

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=microsoft AND product=internet_explorer AND version=9

vendor=microsoft AND product=windows_7 AND version=-

vendor=microsoft AND product=windows_7 AND version=- AND update=sp1

vendor=microsoft AND product=windows_server_2008 AND version=- AND update=sp2

vendor=microsoft AND product=windows_server_2008 AND version=r2

vendor=microsoft AND product=windows_server_2008 AND version=r2 AND update=sp1

vendor=microsoft AND product=windows_vista AND version=- AND update=sp2

Reference

TA12-045A-Third Party Advisory, US Government Resource
oval:org.mitre.oval:def:14781-Tool Signature
MS12-010-Patch, Vendor Advisory

Keywords

CVE-2012-0155

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2012-0155

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures