(MS12-023) Cumulative Security Update for Internet Explorer (2675157)

Publish date: April 11, 2012
  Severity: CRITICAL
  CVE Identifier: CVE-2012-0168,CVE-2012-0169,CVE-2012-0170,CVE-2012-0171,CVE-2012-0172
  Advisory Date: APR 11, 2012

  DESCRIPTION

This security update resolves several reported vulnerabilities found in Internet Explorer 6, 7, 8, and 9. Any of the said versions of Internet Explorer installed on normal Windows operating systems are more vulnerable than that of same versions installed on Windows server operating systems.

This particular update includes what Microsoft calls as defense-in-depth updates, a multi-layered approach of defense. The following vulnerabilities are solved by this update:

  • Print Feature Remote Code Execution Vulnerability - CVE-2012-0168
  • JScript9 Remote Code Execution Vulnerability - CVE-2012-0169
  • OnReadyStateChange Remote Code Execution Vulnerability - CVE-2012-0170
  • SelectAll Remote Code Execution Vulnerability - CVE-2012-0171
  • VML Style Remote Code Execution Vulnerability - CVE-2012-0172

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Internet Explorer 6 (Windows XP Service Pack 3)
  • Internet Explorer 6 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows XP Service Pack 3)
  • Internet Explorer 7 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows Vista Service Pack 2)
  • Internet Explorer 7 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows XP Service Pack 3)
  • Internet Explorer 8 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 8 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Vista Service Pack 2)
  • Internet Explorer 8 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 8 (Windows 7 for x64-based Systems)
  • Internet Explorer 8 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Vista Service Pack 2)
  • Internet Explorer 9 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 9 (Windows 7 for x64-based Systems)
  • Internet Explorer 9 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)

Featured Stories