CVE-2012-4781: Code Injection
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4781?
CVE-2012-4781 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2012-4781?
To fix CVE-2012-4781, you should apply the security updates provided by Microsoft for Internet Explorer versions 6 through 10.
Who is affected by CVE-2012-4781?
CVE-2012-4781 affects users of Microsoft Internet Explorer versions 6, 7, 8, 9, and 10.
What types of attacks can leverage CVE-2012-4781?
Attackers can leverage CVE-2012-4781 through crafted web pages that exploit the use-after-free vulnerability to execute arbitrary code.
Is Internet Explorer still supported for CVE-2012-4781?
Microsoft has ended support for Internet Explorer versions that are affected by CVE-2012-4781, increasing the risk for users who continue to use these versions.