CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
Yes
*KEV
Decision
-
*SSVC
Descriptions
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
El control TabStrip ActiveX en Common Controls en MSCOMCTL.OCX en Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 y SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, y R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, y Visual Basic 6.0 Runtime permite a atacantes remotos ejecutar código de su elección a través de (1) un documento o (2) página web que provoca una corrupción del estado del sistema, también conocido como 'MSCOMCTL.OCX RCE Vulnerability.'
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-03-22 CVE Reserved
- 2012-08-15 CVE Published
- 2022-03-03 Exploited in Wild
- 2022-03-24 KEV Due Date
- 2024-08-06 CVE Updated
- 2024-10-28 EPSS Updated
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/54948 | Vdb Entry | |
| http://www.us-cert.gov/cas/techalerts/TA12-227A.html | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060 | 2018-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Commerce Server Search vendor "Microsoft" for product "Commerce Server" | 2002 Search vendor "Microsoft" for product "Commerce Server" and version "2002" | sp4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Commerce Server Search vendor "Microsoft" for product "Commerce Server" | 2007 Search vendor "Microsoft" for product "Commerce Server" and version "2007" | sp2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Commerce Server Search vendor "Microsoft" for product "Commerce Server" | 2009 Search vendor "Microsoft" for product "Commerce Server" and version "2009" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Commerce Server Search vendor "Microsoft" for product "Commerce Server" | 2009 Search vendor "Microsoft" for product "Commerce Server" and version "2009" | r2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Host Integration Server Search vendor "Microsoft" for product "Host Integration Server" | 2004 Search vendor "Microsoft" for product "Host Integration Server" and version "2004" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2003 Search vendor "Microsoft" for product "Office" and version "2003" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2007 Search vendor "Microsoft" for product "Office" and version "2007" | sp2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2007 Search vendor "Microsoft" for product "Office" and version "2007" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Search vendor "Microsoft" for product "Office" | 2010 Search vendor "Microsoft" for product "Office" and version "2010" | sp1, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Office Web Components Search vendor "Microsoft" for product "Office Web Components" | 2003 Search vendor "Microsoft" for product "Office Web Components" and version "2003" | sp3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2000 Search vendor "Microsoft" for product "Sql Server" and version "2000" | sp4, analysis_services |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2005 Search vendor "Microsoft" for product "Sql Server" and version "2005" | sp4, express_advanced_services |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2005 Search vendor "Microsoft" for product "Sql Server" and version "2005" | sp4, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2005 Search vendor "Microsoft" for product "Sql Server" and version "2005" | sp4, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2005 Search vendor "Microsoft" for product "Sql Server" and version "2005" | sp4, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp1, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp1, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp1, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp2, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp2, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | r2_sp2, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp2, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp2, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp2, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp3, itanium |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp3, x64 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Sql Server Search vendor "Microsoft" for product "Sql Server" | 2008 Search vendor "Microsoft" for product "Sql Server" and version "2008" | sp3, x86 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Basic Search vendor "Microsoft" for product "Visual Basic" | 6.0 Search vendor "Microsoft" for product "Visual Basic" and version "6.0" | runtime_extended_files |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Foxpro Search vendor "Microsoft" for product "Visual Foxpro" | 8.0 Search vendor "Microsoft" for product "Visual Foxpro" and version "8.0" | sp1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Visual Foxpro Search vendor "Microsoft" for product "Visual Foxpro" | 9.0 Search vendor "Microsoft" for product "Visual Foxpro" and version "9.0" | sp2 |
Affected
| ||||||