CVE-2012-2548

Related Files

Zero Day Initiative Advisory 12-200

Posted Dec 22, 2012

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 12-200 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Internet Explorer handles CTreeNode objects. By manipulating a document's elements an attacker can force a dangling pointer to be reused after it has been freed. The issue lies in a possible type confusion between a CTreeNode object and an ISpanQualifier instance during the layout of a document being performed. An attacker can leverage this vulnerability to execute code under the context of the current process.

tags | advisory, remote, arbitrary

advisories | CVE-2012-2548

SHA-256 | 9313809bc33fb1b4fb3a38bec12fbad0b558ced2ba29bf9080130b1e6f4c1a69

Download | Favorite | View