CVE-2012-0012 in Microsoft Internet Explorer
Summary
Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."
Reservation
11/09/2011
Disclosure
02/14/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4634 | Microsoft Internet Explorer String information disclosure | 200 | Unproven | Official fix | CVE-2012-0012 |