{"vulnerability": "cve-2012-4969", "sightings": [{"uuid": "393c46b5-38e3-4159-8c36-048113bce8a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/ffb55b2c-95bc-4233-8f37-af89e15a6e63", "content": "", "creation_timestamp": "2020-10-09T16:56:09.000000Z"}, {"uuid": "86da5945-9bca-4cc5-9a11-ddd102d30174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/237a4b53-77ed-47a5-8efe-8cda05ff3fdd", "content": "", "creation_timestamp": "2020-10-09T17:19:04.000000Z"}, {"uuid": "2fd3dc85-0b5d-48cc-a105-229b887f73f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "9e272259-82ab-4b49-b12e-483197528e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971640", "content": "", "creation_timestamp": "2024-12-24T20:32:13.092128Z"}, {"uuid": "a927aaff-92b5-4049-93d0-12e0a1b099ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "b2cb018f-bebb-4cd6-966a-eb21f76ccef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:02.000000Z"}, {"uuid": "1ae6f13f-d34c-4604-9603-9fd366ed69bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:08.000000Z"}, {"uuid": "9437c75b-df4d-480e-85f4-fe4a0e1d04fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_execcommand_uaf.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f97ecd5f-8ccf-4e52-89a4-fff786622f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:42.000000Z"}, {"uuid": "ef19d987-0323-49ed-80b6-e02f0e2892ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:55.000000Z"}, {"uuid": "c53d7c32-7a4a-44d9-ac36-8721907e5175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-4969", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb0143a3-e487-41a4-953e-e07f27b1793b", "content": "", "creation_timestamp": "2026-02-02T12:27:23.378440Z"}, {"uuid": "41e0bdb4-2e4c-437e-9bb1-58c40e6a7535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-4969", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/21840", "content": "", "creation_timestamp": "2012-10-10T00:00:00.000000Z"}, {"uuid": "3c83a0e8-579f-47ba-b5fb-4fdf5e558563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "exploited", "source": "Telegram/eN4daet_wTFXUcRnP-BNdNbB7xd0VffFf4EtDb5GIGEGVG3m", "content": "", "creation_timestamp": "2025-02-06T02:43:26.000000Z"}, {"uuid": "b2bf0e58-fe72-4d80-b938-b7e877fdd269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "exploited", "source": "https://t.me/arpsyndicate/959", "content": "#ExploitObserverAlert\n\nCVE-2012-4969\n\nDESCRIPTION: Exploit Observer has 11 entries related to CVE-2012-4969. Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.\n\nFIRST-EPSS: 0.847520000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-03T14:53:33.000000Z"}, {"uuid": "a1943623-ea99-4d5d-881c-d79ae9be9d24", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4a7acb3-dfe7-4030-a763-0a862d015444", "content": "", "creation_timestamp": "2026-06-19T12:47:10.305824Z"}, {"uuid": "156f4f72-7eeb-43ef-b1a6-6ac6b122eb1d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4cd495f6-a344-4611-ad7c-39a5d06eece3", "content": "", "creation_timestamp": "2026-06-23T14:05:28.135221Z"}, {"uuid": "dd5a58b1-5505-401e-a097-3e13bbec7639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4969", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_execcommand_uaf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"unknown\", \"eromang\", \"binjo\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Microsoft Internet Explorer (MSIE). When\\n          rendering an HTML page, the CMshtmlEd object gets deleted in an unexpected manner,\\n          but the same memory is reused again later in the CMshtmlEd::Exec() function, leading\\n          to a use-after-free condition.\\n\\n          Please note that this vulnerability has been exploited in the wild since Sep 14 2012.\\n\\n          Also note that presently, this module has some target dependencies for the ROP chain to be\\n          valid. For WinXP SP3 with IE8, msvcrt must be present (as it is by default).\\n          For Vista or Win7 with IE8, or Win7 with IE9, JRE 1.6.x or below must be installed (which\\n          is often the case).\", \"disclosure_date\": \"2012-09-14\", \"fullname\": \"exploit/windows/browser/ie_execcommand_uaf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability \", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ie_execcommand_uaf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/browser/ie_execcommand_uaf\", \"references\": [\"CVE-2012-4969\", \"OSVDB-85532\", \"MSB-MS12-063\", \"URL-http://technet.microsoft.com/en-us/security/advisory/2757760\", \"URL-http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 7 on Windows Vista\", \"IE 8 on Windows Vista\", \"IE 8 on Windows 7\", \"IE 9 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:04.177076Z"}]}