CVE-2012-0158

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-0158
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/ Broken Link
http://www.securityfocus.com/bid/52911 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026899 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026900 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026902 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026903 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026904 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026905 Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-101A.html Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74372 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:microsoft:sql_server_2000:-:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2005:-:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:-:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:r2:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:r2:sp1:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:microsoft:biztalk_server:2002:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server:2002:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server:2007:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server_2009:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server_2009:r2:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*
History

24 Jul 2024, 17:07

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:office:2010:*:x86:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:r2:x86:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2000:sp4:analysis_services:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server:2009:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2005:sp4:x64:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp3:x64:*:*:*:*:*
cpe:2.3:a:microsoft:visual_basic:6.0:*:runtime_extended_files:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2005:sp4:itanium:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp2:x64:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:r2:x64:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp3:itanium:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp2:x86:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2005:sp4:x86:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2005:sp4:express_advanced_services:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server:2009:r2:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp2:itanium:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:r2:itanium:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server:2008:sp3:x86:*:*:*:*:*		 cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:sql_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server_2009:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:sql_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:commerce_server_2009:r2:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:-:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2008:r2:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2005:-:sp4:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2000:-:sp4:*:*:*:*:*:*
CVSS v2 : 9.3
v3 : unknown 		v2 : 9.3
v3 : 8.8
References () http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/ - () http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/ - Broken Link
References () http://www.securityfocus.com/bid/52911 - () http://www.securityfocus.com/bid/52911 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026899 - () http://www.securitytracker.com/id?1026899 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026900 - () http://www.securitytracker.com/id?1026900 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026902 - () http://www.securitytracker.com/id?1026902 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026903 - () http://www.securitytracker.com/id?1026903 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026904 - () http://www.securitytracker.com/id?1026904 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1026905 - () http://www.securitytracker.com/id?1026905 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.us-cert.gov/cas/techalerts/TA12-101A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA12-101A.html - Third Party Advisory, US Government Resource
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/74372 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/74372 - Third Party Advisory, VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462 - Broken Link
First Time Microsoft sql Server 2000
Microsoft commerce Server 2009
Microsoft sql Server 2005
Microsoft sql Server 2008
Information

Published : 2012-04-10 21:55

Updated : 2024-07-24 17:07

NVD link : CVE-2012-0158

Mitre link : CVE-2012-0158

CVE.ORG link : CVE-2012-0158

JSON object : View

Products Affected

microsoft

  • office
  • sql_server_2005
  • commerce_server_2009
  • visual_basic
  • biztalk_server
  • commerce_server
  • sql_server_2008
  • office_web_components
  • sql_server_2000
  • visual_foxpro
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')