CVE-2012-2557

CRITICAL 9.3CVE-2012-2557 · Published 21/09/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7= 8= 9`	No fix yet

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability."

References

securityfocus.com/bid/55647
securitytracker.com/id
us-cert.gov/cas/techalerts/TA12-255A.html · US Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-063
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15745

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free