Internet Explorer 'insertAdjacentText' Remote Code Execution Vulnerability (CVE-2012-1879)
Publish Date: 21 de июля de 2015
Severity: : Critical
CVE Kennungen: : CVE-2012-1879,MS12-037
Advisory Date: 21 de июля de 2015
DESCRIPTION
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1005054
Trend Micro Deep Security DPI Rule Name: 1005054 - Internet Explorer 'insertAdjacentText' Remote Code Execution Vulnerability (CVE-2012-1879)
AFFECTED SOFTWARE AND VERSION:
- microsoft ie 6
- microsoft ie 7
- microsoft ie 8
- microsoft ie 9