Security Advisory

CVE-2012-4969

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-09-18 10:00:00
Last updated 2025-10-22 00:05:46
Assigner mitre
State PUBLISHED

Description

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.