CVE-2012-1545

Currently unrated

Key Information:

Vendor
Microsoft
Status
Ie
Internet Explorer
Vendor
CVE Published:
9 March 2012

Summary

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012.

References

http://pwn2own.zerodayinitiative.com/status.html
x_refsource_MISC
http://arstechnica.com/business/news/2012/03/ie-9-on-late...
x_refsource_MISC
http://www.zdnet.com/blog/security/pwn2own-2012-ie-9-hack...
x_refsource_MISC

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.