BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2012-0151Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."

7.8 HIGHEPSS 87.65%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Overview

Severity

ScoreSeverityVersionVector String
7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C

CISA required action

⚡ Known exploited · remediation due Jun 22, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2012-0151
Status
Analyzed
Assigner (CNA)
microsoft
Published
Apr 10, 2012
Last modified
2026-06-16 23:36 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:35 UTC.