Zscaler Security Advisories
Zscaler Protects Against Microsoft’s Out-of-Band Security Update
Zscaler, working with Microsoft through their MAPPs program has proactively deployed protections for the following web based, client-side vulnerability included in their latest out-of-band security update. Zscaler will continue to monitor exploits associated with all vulnerabilities in this update and deploy additional protections as necessary.
MS12-063 – Cumulative Security Update for Internet Explorer (2744842
Severity: Critical
Affected Software
- Microsoft Internet Explorer 6
- Microsoft Internet Explorer 7
- Microsoft Internet Explorer 8
- Microsoft Internet Explorer 9
CVE-2012-1529 - OnMove Use After Free Vulnerability
Description: A remote code execution vulnerability exists in the way that Internet Explorer accesses an object in memory that has not been correctly initialized or has been deleted.
CVE-2012-2546 - Event Listener Use After Free Vulnerability
Description: A remote code execution vulnerability exists in the way that Internet Explorer accesses an object in memory in such a way that an attacker could execute arbitrary code in the context of the current user.
CVE-2012-2548 - Layout Use After Free Vulnerability
Description: A remote code execution vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted.
CVE-2012-2557 - cloneNode Use After Free Vulnerability
Description: A remote code execution vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted.
CVE-2012-4969 - execCommand Use After Free Vulnerability
Description: A remote code execution vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted.