製品・ソフトウェアに関する情報

JVN脆弱性詳細

Internet Explorer に任意のコードが実行される脆弱性

Title	Internet Explorer に任意のコードが実行される脆弱性
Summary	Internet Explorer には、解放済みメモリ使用 (use-after-free) の脆弱性が存在します。なお、本脆弱性を使用した攻撃コードが公開されており、攻撃も観測されています。
Possible impacts	細工された HTML ドキュメントを閲覧することで、任意のコードが実行される可能性があります。
Solution	2012年9月22日、本脆弱性の修正を含むマイクロソフトセキュリティ情報 MS12-063 が公開されました。 (http://technet.microsoft.com/ja-jp/security/Bulletin/MS12-063) [アップデートする] Microsoft が提供する情報をもとにアップデートを行ってください。 [ワークアラウンドを実施する] 以下の回避策を適用することで、本脆弱性の影響を軽減することが可能です。　　* Fix it 50939 を適用する　　　(http://support.microsoft.com/kb/2757760#FixItForMe) 　　* Enhanced Mitigation Experience Toolkit (EMET) を適用する　　　(http://support.microsoft.com/kb/2458544/ja) 　　* Data Execution Prevention (DEP) を有効にする　　　 (http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx) 詳しくは、Microsoft が提供する情報をご確認ください。
Publication Date	Sept. 18, 2012, midnight
Registration Date	Sept. 18, 2012, 4:44 p.m.
Last Update	Oct. 1, 2012, 4:30 p.m.

CVSS2.0 : 危険
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected System

マイクロソフト

Microsoft Internet Explorer 6

Microsoft Internet Explorer 7

Microsoft Internet Explorer 8

Microsoft Internet Explorer 9

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-4969	http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4969
National Vulnerability Database (NVD)
2	CVE-2012-4969	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4969

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Microsoft Security Advisory
1	(2757760): Vulnerability in Internet Explorer Could Allow Remote Code Execution	http://technet.microsoft.com/en-us/security/advisory/2757760
Microsoft Security Bulletin
2	MS12-063	http://technet.microsoft.com/en-us/security/bulletin/ms12-063
Microsoft Support
3	(KB2757760): Microsoft Security Advisory: Vulnerability in Internet Explorer could allow remote code execution	http://support.microsoft.com/kb/2757760/ja
TechNet Blogs
4	Internet Explorer の脆弱性に対処するセキュリティ更新の提供予告	http://blogs.technet.com/b/jpsecurity/archive/2012/09/20/3521230.aspx
5	Internet Explorer の脆弱性に関するセキュリティアドバイザリ 2757760 を公開	http://blogs.technet.com/b/jpsecurity/archive/2012/09/18/3520723.aspx
6	More information on Security Advisory 2757760's Fix It	http://blogs.technet.com/b/srd/archive/2012/09/19/more-information-on-security-advisory-2757760-s-fix-it.aspx
マイクロソフトセキュリティアドバイザリ
7	(2757760): Internet Explorer の脆弱性により、リモートでコードが実行される	http://technet.microsoft.com/ja-jp/security/advisory/2757760
マイクロソフトセキュリティ情報
8	MS12-063	http://technet.microsoft.com/ja-jp/security/bulletin/ms12-063
富士通セキュリティ情報
9	TA12-262A	http://software.fujitsu.com/jp/security/vulnerabilities/ta12-262a.html
10	TA12-265A	http://software.fujitsu.com/jp/security/vulnerabilities/ta12-265a.html

その他

No	Name	URL
IPA 緊急対策情報
1	20120920-windows	http://www.ipa.go.jp/security/ciadr/vul/20120920-windows.html
JPCERT 注意喚起
2	JPCERT-AT-2012-0030	http://www.jpcert.or.jp/at/2012/at120030.txt
JVN
3	JVNTA12-262A	http://jvn.jp/cert/JVNTA12-262A/index.html
4	JVNTA12-265A	https://jvn.jp/cert/JVNTA12-265A/
5	JVNVU#480095	http://jvn.jp/cert/JVNVU480095
US-CERT Technical Cyber Security Alert
6	TA12-262A	http://www.us-cert.gov/cas/techalerts/TA12-262A.html
7	TA12-265A	http://www.us-cert.gov/cas/techalerts/TA12-265A.html
US-CERT Vulnerability Note
8	VU#480095	https://www.kb.cert.org/vuls/id/480095

Change Log

No	Changed Details	Date of change
0	[2012年09月18日] 掲載 [2012年09月19日] CVSS による深刻度：基本値と脆弱性評価基準を追加 CWE による脆弱性タイプ一覧：CWE-ID を追加 [2012年09月20日] 影響を受けるシステム：情報を更新ベンダ情報：マイクロソフト (Microsoft Security Advisory: Vulnerability in Internet Explorer could allow remote code execution) を追加ベンダ情報：マイクロソフト (Internet Explorer の脆弱性に関するセキュリティアドバイザリ 2757760 を公開) を追加 [2012年09月21日] 　対策：Fix it 50939 による対策を追加　ベンダ情報：マイクロソフト (More information on Security Advisory 2757760's Fix It) を追加　ベンダ情報：マイクロソフト (Internet Explorer の脆弱性に対処するセキュリティ更新の提供予告) を追加ベンダ情報：富士通 (TA12-262A) を追加 [2012年09月24日] 　ベンダ情報：マイクロソフト (MS12-063) を追加 [2012年09月25日] 　対策方法：内容を更新 [2012年10月01日] ベンダ情報：富士通 (TA12-265A) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2012-4969

Summary	Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
Publication Date	Sept. 18, 2012, 7:39 p.m.
Registration Date	Jan. 28, 2021, 3:04 p.m.
Last Update	Nov. 21, 2024, 10:43 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:6:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_server:2003:sp2::::::
2	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::itanium:*
3	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::x64:*
4	cpe:2.3:o:microsoft:windows_xp::sp2:::professional::x64:*
5	cpe:2.3:o:microsoft:windows_xp::sp3::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:7:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_server:2003:sp2::::::
2	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::itanium:*
3	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::x64:*
4	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::itanium:*
5	cpe:2.3:o:microsoft:windows_server:2008:sp2::::::
6	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::x64:*
7	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
8	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
9	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
10	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
11	cpe:2.3:o:microsoft:windows_xp:-:sp2:::::x64:*

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:8:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_7:::x64:::::*
2	cpe:2.3:o:microsoft:windows_7::sp1:::::x64:
3	cpe:2.3:o:microsoft:windows_7:::::::x64:*
4	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*
5	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::x64:*
6	cpe:2.3:o:microsoft:windows_server:2003:sp2::::::
7	cpe:2.3:o:microsoft:windows_server:2008:sp2::::::
8	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::x64:*
9	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::itanium:*
10	cpe:2.3:o:microsoft:windows_server_2008:r2::::::itanium:
11	cpe:2.3:o:microsoft:windows_server_2008:r2::::::x64:
12	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
13	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
14	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
15	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
16	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
17	cpe:2.3:o:microsoft:windows_xp:-:sp2:::::x64:*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:9:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_7::::::::
2	cpe:2.3:o:microsoft:windows_7::sp1:::::x64:
3	cpe:2.3:o:microsoft:windows_7:::::::x64:*
4	cpe:2.3:o:microsoft:windows_7::sp1:::::x86:
5	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*
6	cpe:2.3:o:microsoft:windows_7:-:-:::::x64:*
7	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x86:*
8	cpe:2.3:o:microsoft:windows_server_2008::sp2:::::x64:
9	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
10	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
11	cpe:2.3:o:microsoft:windows_server_2008:r2::::::x64:
12	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
13	cpe:2.3:o:microsoft:windows_vista:sp2:::::::*

Related information, measures and tools

No	URL	タグ
1	http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/	Broken Link
2	http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/	Broken Link
3	http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb	Broken Link
4	http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb	Broken Link
5	http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/	Third Party Advisory
6	http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/	Third Party Advisory
7	http://technet.microsoft.com/security/advisory/2757760	Patch Vendor Advisory
8	http://technet.microsoft.com/security/advisory/2757760	Patch Vendor Advisory
9	http://www.kb.cert.org/vuls/id/480095	Third Party Advisory US Government Resource
10	http://www.kb.cert.org/vuls/id/480095	Third Party Advisory US Government Resource
11	http://www.securitytracker.com/id?1027538	Third Party Advisory VDB Entry
12	http://www.securitytracker.com/id?1027538	Third Party Advisory VDB Entry
13	http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild	Third Party Advisory
14	http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild	Third Party Advisory
15	http://www.us-cert.gov/cas/techalerts/TA12-255A.html	Third Party Advisory US Government Resource
16	http://www.us-cert.gov/cas/techalerts/TA12-255A.html	Third Party Advisory US Government Resource
17	http://www.us-cert.gov/cas/techalerts/TA12-262A.html	Third Party Advisory US Government Resource
18	http://www.us-cert.gov/cas/techalerts/TA12-262A.html	Third Party Advisory US Government Resource
19	http://www.us-cert.gov/cas/techalerts/TA12-265A.html	Third Party Advisory US Government Resource
20	http://www.us-cert.gov/cas/techalerts/TA12-265A.html	Third Party Advisory US Government Resource
21	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729	Third Party Advisory
22	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729	Third Party Advisory

Common Vulnerabilities List

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:7:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_server:2003:sp2::::::
2	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::itanium:*
3	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::x64:*
4	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::itanium:*
5	cpe:2.3:o:microsoft:windows_server:2008:sp2::::::
6	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::x64:*
7	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
8	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
9	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
10	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
11	cpe:2.3:o:microsoft:windows_xp:-:sp2:::::x64:*

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:8:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_7:::x64:::::*
2	cpe:2.3:o:microsoft:windows_7::sp1:::::x64:
3	cpe:2.3:o:microsoft:windows_7:::::::x64:*
4	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*
5	cpe:2.3:o:microsoft:windows_server:2003:sp2:::::x64:*
6	cpe:2.3:o:microsoft:windows_server:2003:sp2::::::
7	cpe:2.3:o:microsoft:windows_server:2008:sp2::::::
8	cpe:2.3:o:microsoft:windows_server:2008:sp2:::::x64:*
9	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::itanium:*
10	cpe:2.3:o:microsoft:windows_server_2008:r2::::::itanium:
11	cpe:2.3:o:microsoft:windows_server_2008:r2::::::x64:
12	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
13	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
14	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
15	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
16	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
17	cpe:2.3:o:microsoft:windows_xp:-:sp2:::::x64:*

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:9:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_7::::::::
2	cpe:2.3:o:microsoft:windows_7::sp1:::::x64:
3	cpe:2.3:o:microsoft:windows_7:::::::x64:*
4	cpe:2.3:o:microsoft:windows_7::sp1:::::x86:
5	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x64:*
6	cpe:2.3:o:microsoft:windows_7:-:-:::::x64:*
7	cpe:2.3:o:microsoft:windows_7:-:sp1:::::x86:*
8	cpe:2.3:o:microsoft:windows_server_2008::sp2:::::x64:
9	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
10	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
11	cpe:2.3:o:microsoft:windows_server_2008:r2::::::x64:
12	cpe:2.3:o:microsoft:windows_vista::sp2:::::x64:
13	cpe:2.3:o:microsoft:windows_vista:sp2:::::::*