Back to search
CVE-2012-0012
Published: Feb 14, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
TA12-045A
third-party-advisory
x_refsource_CERT
MS12-010
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:14870
vdb-entry
signature
x_refsource_OVAL
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now