CVE-2012-2557

Published: Sep 21, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability."

Affected (15)

Products: Microsoft: Internet Explorer

Microsoft

1 product

Internet Explorer

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6
Microsoft Internet Explorer	Version 6 beta1
Microsoft Internet Explorer	Version 6 sp1
Microsoft Internet Explorer	Version 6 sp2
Microsoft Internet Explorer	Version 6 sp3
Microsoft Internet Explorer	Version 7
Microsoft Internet Explorer	Version 7 beta1
Microsoft Internet Explorer	Version 7 beta2
Microsoft Internet Explorer	Version 7 beta3
Microsoft Internet Explorer	Version 7 rc1
Microsoft Internet Explorer	Version 8
Microsoft Internet Explorer	Version 8 beta1
Microsoft Internet Explorer	Version 8 beta2
Microsoft Internet Explorer	Version 8 rc1
Microsoft Internet Explorer	Version 9