CVEvulnerability

CVE-2012-1545

5.8 MEDIUM Published 2012-03-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-03-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-119

Description

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.

Affected configurations

• microsoft ie 10 • microsoft internet explorer 6.0 • microsoft internet explorer 6.00.2462.0000 • microsoft internet explorer 6.00.2479.0006 • microsoft internet explorer 6.0.2600 • microsoft internet explorer 6.00.2600.0000 • microsoft internet explorer 6.0.2800 • microsoft internet explorer 6.0.2800.1106 • microsoft internet explorer 6.00.2800.1106 • microsoft internet explorer 6.0.2900 • microsoft internet explorer 6.0.2900.2180 • microsoft internet explorer 6.00.2900.2180 • microsoft internet explorer 6.00.3663.0000 • microsoft internet explorer 6.00.3718.0000 • microsoft internet explorer 6.00.3790.0000 • microsoft internet explorer 6.00.3790.1830 • microsoft internet explorer 6.00.3790.3959 • microsoft internet explorer 7.0 • microsoft internet explorer 7.0.5730 • microsoft internet explorer 7.0.5730.11 • microsoft internet explorer 7.00.5730.1100 • microsoft internet explorer 7.00.6000.16386 • microsoft internet explorer 7.00.6000.16441 • microsoft internet explorer 8.0.6001 • microsoft internet explorer 9

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References