Microsoft Internet Explorer Improper Ref Counting Use-After-Free Remote Code Execution Vulnerability

Bugtraq ID:	56830
Class:	Unknown
CVE:	CVE-2012-4787
Remote:	Yes
Local:	No
Published:	Dec 11 2012 12:00AM
Updated:	Jul 23 2013 01:54PM
Credit:	Fermin J. Serna of Google Inc
Vulnerable:	Microsoft Internet Explorer 9 + Microsoft Windows 7 + Microsoft Windows 7 for 32-bit Systems SP1 + Microsoft Windows 7 for 32-bit Systems 0 + Microsoft Windows 7 for x64-based Systems SP1 + Microsoft Windows 7 for x64-based Systems 0 + Microsoft Windows 7 Home Premium - Sp1 X64 + Microsoft Windows 7 Home Premium - Sp1 X32 + Microsoft Windows Server 2008 R2 + Microsoft Windows Server 2008 for 32-bit Systems SP2 + Microsoft Windows Server 2008 for 32-bit Systems 0 + Microsoft Windows Server 2008 for x64-based Systems SP2 + Microsoft Windows Server 2008 for x64-based Systems 0 + Microsoft Windows Server 2008 R2 for x64-based Systems SP1 + Microsoft Windows Vista SP2 + Microsoft Windows Vista SP1 + Microsoft Windows Vista x64 Edition SP2 + Microsoft Windows Vista x64 Edition SP1 + Microsoft Windows Vista x64 Edition 0
Not Vulnerable:

Microsoft Internet Explorer Improper Ref Counting Use-After-Free Remote Code Execution Vulnerability

Microsoft Internet Explorer is prone to a remote code-execution vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.

Microsoft Internet Explorer versions 9 and 10 are affected.

Microsoft Internet Explorer Improper Ref Counting Use-After-Free Remote Code Execution Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/56830.js.txt

Microsoft Internet Explorer Improper Ref Counting Use-After-Free Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Microsoft Internet Explorer Improper Ref Counting Use-After-Free Remote Code Execution Vulnerability

References:

• Microsoft Internet Explorer Homepage (Microsoft)