CVE-2012-2523

CWE-1893 documents3 sources

Severity

9.3CRITICAL

EPSS

64.7%

top 1.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Internet Explorer Microsoft Jscript Microsoft Vbscript

Timeline

PublishedAug 15

Latest updateMay 14

Description

Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka "JavaScript Integer Overflow Remote Code Execution Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/internet_explorer8, 9+1

▶NVDmicrosoft/jscript5.8

▶NVDmicrosoft/vbscript5.8

🔴Vulnerability Details

GHSA

GHSA-3qqc-w95p-x54w: Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5↗2022-05-14

▶

CVEList

CVE-2012-2523: Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5↗2012-08-15

▶