CVE-2012-0012 — Improper Initialization in Microsoft Internet Explorer
Severity
4.3MEDIUMNVD
EPSS
16.5%
top 5.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Latest updateMay 4
Description
Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."
CVSS vector
AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9
Affected Packages1 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-f263-5jv5-v234: Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data f↗2022-05-04