Null Byte Information Disclosure Vulnerability (CVE-2012-1873)
Publish Date: 21 luglio 2015
Gravità: : Medio
Identificatori CVE: CVE-2012-1873,MS12-037
Data notifica: 21 luglio 2015
Descrizione
Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1005053
Trend Micro Deep Security DPI Rule Name: 1005053 - Null Byte Information Disclosure Vulnerability (CVE-2012-1873)
Software e versione interessati:
- microsoft ie 7
- microsoft ie 8
- microsoft ie 9