CVE-2012-4775

Description

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka CTreeNode Use After Free Vulnerability.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
14.806

Associated Vulnerability

VulnerabilityOS Platform
Cumulative Security Update for Internet Explorer 9 in Windows Vista (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows 7 (KB2761451) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 9 in Windows 7 (KB2761451) x86 based systems for SP1Windows
Cumulative Security Update for Internet Explorer 9 in Windows Vista x64 Edition (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 x64 Edition (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows 7 x64 Edition (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows 7 x64 Edition (KB2761451) for SP1Windows
Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 R2 x64 Edition (KB2761451)Windows
Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 R2 x64 Edition (KB2761451)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-12625Cumulative Security Update for Internet Explorer 9 in Windows Vista (KB2761451)
PATCH-12626Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 (KB2761451)
PATCH-12627Cumulative Security Update for Internet Explorer 9 in Windows 7 (KB2761451)
PATCH-12628Cumulative Security Update for Internet Explorer 9 in Windows 7 (KB2761451)
PATCH-12629Cumulative Security Update for Internet Explorer 9 in Windows Vista x64 Edition (KB2761451)
PATCH-12630Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 x64 Edition (KB2761451)
PATCH-12631Cumulative Security Update for Internet Explorer 9 in Windows 7 x64 Edition (KB2761451)
PATCH-12632Cumulative Security Update for Internet Explorer 9 in Windows 7 x64 Edition (KB2761451)
PATCH-12633Cumulative Security Update for Internet Explorer 9 in Windows Server 2008 R2 x64 Edition (KB2761451)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234