Microsoft · Internet Explorer
End of lifeInternet Explorer reached End of lifeThe vendor no longer ships security fixes. Remove or isolate the product instead of waiting for a patch. on 15 Jun 2022. No patch is coming: remove or isolate it.
A use-after-free flaw in the CMshtmlEd::Exec function of mshtml.dll, the rendering component of Microsoft Internet Explorer 6 through 9, allows memory to be accessed after it has been released. An remote attacker can execute arbitrary code by getting a victim to load a crafted web site, requiring no authentication but user interaction to visit the page.
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
First seen exploited the day it was disclosed. Public exploit code (Metasploit) was available 4 days before disclosure.
CISA KEV listing is when exploitation was confirmed, not necessarily the first attack.
No high- or medium-confidence techniques. The 2 available links are lower confidence and listed below.
These come from early or generic mappings, text matching, or contradict this CVE’s details (for example a public-facing technique on a bug that needs a user to open a file). Shown for completeness.
Reports are matched by finding the exact id CVE-2012-4969 in their text; nobody has reviewed the match. One passage is shown per report, at most 320 characters, linked to the original.
According to a blog by Websense, threat actors compromised the Tibetan Alliance of Chicago’s website to host malicious code that exploited a vulnerability in Internet Explorer (CVE-2012-4969.)
Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.