This patch addresses a vulnerability on Internet Explorer. Once successfully exploited, it could allow remote code execution once users view a specially crafted website thus compromising the security of the infected systems.
Note that this vulnerability does not affect Internet Explorer versions 9 and 10 respectively. The following Windows Server Core Installations are also not affected:
MS Bulletin ID | Vulnerability ID | DPI Rule Number | DPI Rule Name | Release Date | IDF Compatibility |
MS13-008 |
CVE-2012-4792 | 1005297 | Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability | 31-Dec-12 | YES |
1005301 | Identified Suspicious JavaScript Encoded Window Location Object | 31-Dec-12 | YES | ||
CVE-2012-4792 | 1005298 | Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability | 31-Dec-12 | YES |