CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2012-0158
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Apr 10, 2012
- Last modified
- 2026-06-16 23:36 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
microsoftoffice5 version ranges
- 2003 sp3
- 2007 sp2
- 2007 sp3
- 2010
- 2010 sp1
microsoftoffice web components1 version range
- 2003 sp3
microsoftsql server 20000 version ranges
No version detail published.
microsoftsql server 20050 version ranges
No version detail published.
microsoftsql server 20082 version ranges
- r2
- r2 sp1
microsoftbiztalk server1 version range
- 2002 sp1
microsoftcommerce server2 version ranges
- 2002 sp4
- 2007 sp2
microsoftcommerce server 20091 version range
- r2
microsoftvisual basic1 version range
- 6.0
microsoftvisual foxpro2 version ranges
- 8.0 sp1
- 9.0 sp2
References
- opensources.info http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/
- securityfocus.com http://www.securityfocus.com/bid/52911
- securitytracker.com http://www.securitytracker.com/id?1026899
- securitytracker.com http://www.securitytracker.com/id?1026900
- securitytracker.com http://www.securitytracker.com/id?1026902
- securitytracker.com http://www.securitytracker.com/id?1026903
- securitytracker.com http://www.securitytracker.com/id?1026904
- securitytracker.com http://www.securitytracker.com/id?1026905
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA12-101A.html
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/74372
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0158