CVE-2012-1880

Related Files

Zero Day Initiative Advisory 12-192

Posted Dec 21, 2012

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 12-192 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Internet Explorer handles consecutive calls to insertRow. When the number of rows reaches a certain threshold the program fails to correctly relocate certain key objects. This can lead to a use-after-free vulnerability which can result in remote code execution under the context of the current process.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2012-1880

SHA-256 | 99ea9322e505dba8036dea8d3150e9f23d91823239f879e3477401f033570694

Download | Favorite | View