Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."
                
            References
                    Configurations
                    Configuration 1 (hide)
| AND | 
 
 | 
Configuration 2 (hide)
| AND | 
 
 | 
Information
                Published : 2012-06-12 15:55
Updated : 2021-07-23 08:12
NVD link : CVE-2012-1873
Mitre link : CVE-2012-1873
JSON object : View
CWE
                
                    
                        
                        CWE-200
                        
            Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
                microsoft
- windows_7
- windows_vista
- windows_xp
- windows_server_2008
- internet_explorer
- windows_server_2003


