Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2012-4969

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

CVSS 8.1 · HighBuzz score 52.6KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 52.6

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 16.1 · diversity 11.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
16.1
4 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
4 source links · newest first
  • Scarlet Mimic: Years-Long Espionage Campaign Targets Minority ActivistsUnit42

    Executive Summary Over the past seven months, Unit 42 has been investigating a series of attacks we attribute to a group we have code named “Scarlet Mimic.” The attacks began over four years ago and their targeting pattern suggests that this adversary’s primary mission is to gather information about minority rights activists. We do not

    vendorunit42.paloaltonetworks.comJan 24, 2016, 3:00 PM
  • Microsoft EMET’s protections can be bypassed, researchers showHelp Net Security

    Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) is a good piece of software and helpful for protecting non-kernel Microsoft applications and third-party software, but the protection it offers can also be bypassed completely if the attackers know what they are doing, claim researchers from security firm Bromium. “EMET adds special protections (for 32bit processes only) against a relatively new hacker technique known as ROP (return oriented programming),” Bromium’s Jared DeMott explained in a blog post. “ROP … More →

    newswww.helpnetsecurity.comFeb 25, 2014, 7:07 AM
  • AlienVault Exposes New Details of Sykipot AttacksSecurityWeek

    Researchers at AlienVault shed some light on the evolution of the Sykipot malware attacks. The Sykipot attacks have exploited a number of zero-days during the past few years, including vulnerabilities affecting Adobe Reader, Adobe Flash Player and Microsoft Internet Explorer.

    newswww.securityweek.comMar 21, 2013, 6:54 PM
  • Recent IE Zero-Day Tied to Notorious Elderwood Gang, Symantec SaysSecurityWeek

    Researchers at Symantec say the waterholing attacks utilizing the recently-publicized Internet Explorer zero-day are tied to a gang responsible for a spate of similar kinds of attacks.

    newswww.securityweek.comJan 4, 2013, 2:29 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence