Where to Buy Trend Micro Products

For Home

For Small Business

1-888-762-8736
(M-F 8:00am-5:00pm CST)

For Enterprise

1-877-218-7353
(M-F 8:00am-5:00pm CST)

Not in the United States?
Select the country/language of your choice:

Asia Pacific Region

Europe

The Americas

Not in the United States?
Select the country/language of your choice:

Asia/Pacific

Europe

America

Login

For Home

For Business

For Partners

Threat Encyclopedia

(MS13-008) Security Update for Internet Explorer (2799329)

CVE-2012-4792

SEVERITY

CRITICAL

//  ADVISORY DATE

15 JAN 2013


DESCRIPTION

This patch addresses a vulnerability on Internet Explorer. Once successfully exploited, it could allow remote code execution once users view a specially crafted website thus compromising the security of the infected systems.

Note that this vulnerability does not affect Internet Explorer versions 9 and 10 respectively. The following Windows Server Core Installations are also not affected:

  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012 (Server Core installation)

TREND MICRO PROTECTION INFORMATION

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS13-008
CVE-2012-4792 1005297 Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability 31-Dec-12 YES


1005301 Identified Suspicious JavaScript Encoded Window Location Object 31-Dec-12 YES

CVE-2012-4792 1005298 Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability 31-Dec-12 YES

SOLUTION

AFFECTED SOFTWARE AND VERSION

  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8

Connect with us on