(MS12-052) Cumulative Security Update for Internet Explorer (2722913)

  Severity: CRITICAL
  CVE Identifier: CVE-2012-1526,CVE-2012-2521,CVE-2012-2522,CVE-2012-2523
  Advisory Date: SEP 28, 2012

  DESCRIPTION

This bulletin patches four identified vulnerabilities that exist in version 6-9 of the Internet Explorer browser. Attackers looking to exploit these vulnerabilities lures users to open or view a specially crafted webpage. When successful, the exploit may allow remote code execution on affected computers.

Note that the following Server Core installations are not affected by the vulnerabilities in this bulletin:

  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Internet Explorer 6 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows XP Service Pack 3)
  • Internet Explorer 7 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows XP Service Pack 3)
  • Internet Explorer 8 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 8 (Windows 7 for x64-based Systems)
  • Internet Explorer 8 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Vista Service Pack 2)
  • Internet Explorer 9 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 6 (Windows XP Service Pack 3)
  • Internet Explorer 6 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows Vista Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Vista Service Pack 2)
  • Internet Explorer 8 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 9 (Windows 7 for x64-based Systems)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)

Featured Stories