CVE-2012-0012

Description

Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."

Weakness classification

• CWE-665: Improper Initialization

Primary references

• secure@microsoft.com — Third Party Advisory, US Government Resource
• secure@microsoft.com — Patch, Vendor Advisory
• secure@microsoft.com — Tool Signature
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Tool Signature