Buffer overflow in Microsoft Internet Explorer

CVE-2012-1526

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."

Vulnerability class: Buffer Overflow

EPSS: 0.200 (97.2th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_explorer — versions 6, 7
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_MS, vendor-advisory)
cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)