(MS12-023) Cumulative Security Update for Internet Explorer (2675157)

Publish date: April 11, 2012

Severity: CRITICAL

CVE Identifier: CVE-2012-0168,CVE-2012-0169,CVE-2012-0170,CVE-2012-0171,CVE-2012-0172

Advisory Date: APR 11, 2012

DESCRIPTION

This security update resolves several reported vulnerabilities found in Internet Explorer 6, 7, 8, and 9. Any of the said versions of Internet Explorer installed on normal Windows operating systems are more vulnerable than that of same versions installed on Windows server operating systems.

This particular update includes what Microsoft calls as defense-in-depth updates, a multi-layered approach of defense. The following vulnerabilities are solved by this update:

Print Feature Remote Code Execution Vulnerability - CVE-2012-0168
JScript9 Remote Code Execution Vulnerability - CVE-2012-0169
OnReadyStateChange Remote Code Execution Vulnerability - CVE-2012-0170
SelectAll Remote Code Execution Vulnerability - CVE-2012-0171
VML Style Remote Code Execution Vulnerability - CVE-2012-0172

SOLUTION

PATCH: http://technet.microsoft.com/en-us/security/bulletin/ms12-023

AFFECTED SOFTWARE AND VERSION

Internet Explorer 6 (Windows XP Service Pack 3)
Internet Explorer 6 (Windows XP Professional x64 Edition Service Pack 2)
Internet Explorer 6 (Windows Server 2003 Service Pack 2)
Internet Explorer 6 (Windows Server 2003 x64 Edition Service Pack 2)
Internet Explorer 6 (Windows Server 2003 with SP2 for Itanium-based Systems)
Internet Explorer 7 (Windows XP Service Pack 3)
Internet Explorer 7 (Windows XP Professional x64 Edition Service Pack 2)
Internet Explorer 7 (Windows Server 2003 Service Pack 2)
Internet Explorer 7 (Windows Server 2003 x64 Edition Service Pack 2)
Internet Explorer 7 (Windows Server 2003 with SP2 for Itanium-based Systems)
Internet Explorer 7 (Windows Vista Service Pack 2)
Internet Explorer 7 (Windows Vista x64 Edition Service Pack 2)
Internet Explorer 7 (Windows Server 2008 for 32-bit Systems Service Pack 2)
Internet Explorer 7 (Windows Server 2008 for x64-based Systems Service Pack 2)
Internet Explorer 7 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
Internet Explorer 8 (Windows XP Service Pack 3)
Internet Explorer 8 (Windows XP Professional x64 Edition Service Pack 2)
Internet Explorer 8 (Windows Server 2003 Service Pack 2)
Internet Explorer 8 (Windows Server 2003 x64 Edition Service Pack 2)
Internet Explorer 8 (Windows Vista Service Pack 2)
Internet Explorer 8 (Windows Vista x64 Edition Service Pack 2)
Internet Explorer 8 (Windows Server 2008 for 32-bit Systems Service Pack 2)
Internet Explorer 8 (Windows Server 2008 for x64-based Systems Service Pack 2)
Internet Explorer 8 (Windows 7 for 32-bit Systems)
Internet Explorer 8 (Windows 7 for 32-bit Systems Service Pack 1)
Internet Explorer 8 (Windows 7 for x64-based Systems)
Internet Explorer 8 (Windows 7 for x64-based Systems Service Pack 1)
Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems)
Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems)
Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
Internet Explorer 9 (Windows Vista Service Pack 2)
Internet Explorer 9 (Windows Vista x64 Edition Service Pack 2)
Internet Explorer 9 (Windows Server 2008 for 32-bit Systems Service Pack 2)
Internet Explorer 9 (Windows Server 2008 for x64-based Systems Service Pack 2)
Internet Explorer 9 (Windows 7 for 32-bit Systems)
Internet Explorer 9 (Windows 7 for 32-bit Systems Service Pack 1)
Internet Explorer 9 (Windows 7 for x64-based Systems)
Internet Explorer 9 (Windows 7 for x64-based Systems Service Pack 1)
Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems)
Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)

Related Vulnerability

April 2012 - Microsoft Releases 6 Security Advisories

Featured Stories

$The Mirage of AI Programming: Hallucinations and Code Integrity$
The Mirage of AI Programming: Hallucinations and Code Integrity
The adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.
Read more
$Open Ran Attack of xApps$
Open RAN: Attack of the xApps
This article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handling
Read more
$A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services$
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.
Read more
$How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse$
How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
This article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.
Read more

(MS12-023) Cumulative Security Update for Internet Explorer (2675157)

DESCRIPTION

SOLUTION

AFFECTED SOFTWARE AND VERSION

Related Vulnerability

Featured Stories

Resources

Support

About Trend

Country Headquarters