CVE coverage
View on NVD →
CVE-2012-4792
CVSS 8.8
Actively exploited (KEV)
2 detections found
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET MALWARE CFR DRIVEBY CVE-2012-4792 DNS Query for C2 domain | rev 7 | 2024-04-13 |
| snort | ET TROJAN CFR DRIVEBY CVE-2012-4792 DNS Query for C2 domain | rev 3 | 2019-08-28 |