// For flags

CVE-2012-1889

Microsoft XML Core Services Memory Corruption Vulnerability

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Microsoft XML Core Services 3.0, 4.0, 5.0, y 6.0 accede a localizaciones de memoria mal formadas, lo que permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web modificado.

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-03-22 CVE Reserved
  • 2012-06-13 CVE Published
  • 2012-06-16 First Exploit
  • 2022-06-08 Exploited in Wild
  • 2022-06-22 KEV Due Date
  • 2024-08-06 CVE Updated
  • 2024-08-26 EPSS Updated
CWE
  • CWE-787: Out-of-bounds Write
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
-sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 8
Search vendor "Microsoft" for product "Windows 8"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
x64
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2012
Search vendor "Microsoft" for product "Windows Server 2012"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Vista
Search vendor "Microsoft" for product "Windows Vista"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
3.0
Search vendor "Microsoft" for product "Xml Core Services" and version "3.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
-sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
-sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 8
Search vendor "Microsoft" for product "Windows 8"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
x64
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2012
Search vendor "Microsoft" for product "Windows Server 2012"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Vista
Search vendor "Microsoft" for product "Windows Vista"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
4.0
Search vendor "Microsoft" for product "Xml Core Services" and version "4.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
-sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 7
Search vendor "Microsoft" for product "Windows 7"
-sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 8
Search vendor "Microsoft" for product "Windows 8"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2003
Search vendor "Microsoft" for product "Windows Server 2003"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
x64
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
sp1
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Server 2012
Search vendor "Microsoft" for product "Windows Server 2012"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Vista
Search vendor "Microsoft" for product "Windows Vista"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
6.0
Search vendor "Microsoft" for product "Xml Core Services" and version "6.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
-sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Expression Web
Search vendor "Microsoft" for product "Expression Web"
2
Search vendor "Microsoft" for product "Expression Web" and version "2"
-
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Expression Web
Search vendor "Microsoft" for product "Expression Web"
sp1
Search vendor "Microsoft" for product "Expression Web" and version "sp1"
-
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Groove
Search vendor "Microsoft" for product "Groove"
2007
Search vendor "Microsoft" for product "Groove" and version "2007"
sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Groove
Search vendor "Microsoft" for product "Groove"
2007
Search vendor "Microsoft" for product "Groove" and version "2007"
sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Groove Server
Search vendor "Microsoft" for product "Groove Server"
2007
Search vendor "Microsoft" for product "Groove Server" and version "2007"
sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Groove Server
Search vendor "Microsoft" for product "Groove Server"
2007
Search vendor "Microsoft" for product "Groove Server" and version "2007"
sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office
Search vendor "Microsoft" for product "Office"
2003
Search vendor "Microsoft" for product "Office" and version "2003"
sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office
Search vendor "Microsoft" for product "Office"
2007
Search vendor "Microsoft" for product "Office" and version "2007"
sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office
Search vendor "Microsoft" for product "Office"
2007
Search vendor "Microsoft" for product "Office" and version "2007"
sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office Compatibility Pack
Search vendor "Microsoft" for product "Office Compatibility Pack"
-sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office Compatibility Pack
Search vendor "Microsoft" for product "Office Compatibility Pack"
-sp3
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Office Word Viewer
Search vendor "Microsoft" for product "Office Word Viewer"
--
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Sharepoint Server
Search vendor "Microsoft" for product "Sharepoint Server"
2007
Search vendor "Microsoft" for product "Sharepoint Server" and version "2007"
sp2
Safe
Microsoft
Search vendor "Microsoft"
Xml Core Services
Search vendor "Microsoft" for product "Xml Core Services"
5.0
Search vendor "Microsoft" for product "Xml Core Services" and version "5.0"
-
Affected
in Microsoft
Search vendor "Microsoft"
Sharepoint Server
Search vendor "Microsoft" for product "Sharepoint Server"
2007
Search vendor "Microsoft" for product "Sharepoint Server" and version "2007"
sp3
Safe