风险等级: 緊急
  CVE标识符: : CVE-2012-4792
  建议日期 : 2013年1月15日

  描述

This patch addresses a vulnerability on Internet Explorer. Once successfully exploited, it could allow remote code execution once users view a specially crafted website thus compromising the security of the infected systems.

Note that this vulnerability does not affect Internet Explorer versions 9 and 10 respectively. The following Windows Server Core Installations are also not affected:

  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems (Server Core installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2012 (Server Core installation)

  保护信息

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS13-008
 CVE-2012-4792 1005297 Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability 31-Dec-12 YES


1005301 Identified Suspicious JavaScript Encoded Window Location Object 31-Dec-12 YES

CVE-2012-4792 1005298 Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free Vulnerability 31-Dec-12 YES

  解决方案

  受感染软件和版本:

  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8