CVE-2012-1873 in Internet Explorer
Summary
Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
03/22/2012
Disclosure
06/12/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5517 | Microsoft Internet Explorer information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2012-1873 |