MALWARELIST.net – Your Information Security Source

Vulnerability: Multiple vulnerabilities in Microsoft Internet Explorer

1. System compromise in Microsoft Internet Explorer

Danger: High
Patch: Yes
Number of vulnerabilities: 1

CVE ID: CVE-2012-4787
Vector of operation: Remote
Impact: System Compromise

Affected Products: Microsoft Internet Explorer 9.x, Microsoft Internet Explorer 10.x

Affected versions: Internet Explorer 9.x, Internet Explorer 10.x

Description:

The vulnerability allows a remote user to execute arbitrary code on the target system.

An error in the processing of incorrectly initiated or remote object in Ref Counting. The vulnerability allows a remote user to execute arbitrary code on the target system.

Manufacturer: microsoft.com

Solution: To resolve the vulnerability patch from the manufacturer.

Link: Cumulative Security Update for Internet Explorer

2. Multiple vulnerabilities in Microsoft Internet Explorer

Danger: High
Patch: Yes
Number of vulnerabilities: 2

CVE ID: CVE-2012-4781
CVE-2012-4782
Vector of operation: Remote
Impact: System Compromise

Affected Products: Microsoft Internet Explorer 9.x

Affected versions: Internet Explorer 9.x

Description:

Which can be exploited by malicious people to execute arbitrary code on the target system.

1. An error use after release InjectHTMLStream. A remote user can execute arbitrary code on the target system.

2. An error use after release CMarkup. A remote user can execute arbitrary code on the target system.

Manufacturer URL: http://www.microsoft.com/

Solution: To resolve the vulnerability patch from the manufacturer.

Link: Cumulative Security Update for Internet Explorer