CVE-2012-4969

No fix known ExploitedEPSS 80%CVSS 8.1

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

Published 2012-09-18 · In CISA KEV since 2022-06-08 · CVE record · OSV

Products: microsoft internet_explorer