GCVE-110-CERTCC-2012-154201

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published December 28, 2012

Microsoft Internet Explorer contains a use-after-free vulnerability in the CButton object, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population4d1_direct_report0

certcc-cvss-temporal-env

temporal_score9remediation_levelWreport_confidenceURenvironmental_score9target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-4792

References

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

url

Microsoft Internet Explorer CButton use-after-free vulnerability

advisory

Microsoft Internet Explorer CButton use-after-free vulnerability

advisory

Microsoft Internet Explorer CButton use-after-free vulnerability

advisory

Microsoft Internet Explorer CButton use-after-free vulnerability

advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON