Memory Corruption Vulnerability in Microsoft Internet Explorer

CVE-2012-1545

Summary

Microsoft Internet Explorer versions 6 through 10 Consumer Preview are vulnerable to a memory corruption issue that allows remote attackers to bypass Protected Mode. This vulnerability can potentially lead to a denial of service, affecting the stability and security of the affected browsers. The flaw was demonstrated by VUPEN at the Pwn2Own competition held during CanSecWest 2012, showcasing how attackers could exploit access to a Low integrity process.

References