Unscored severity · published Jan 10, 2012
CVE-2012-0001
The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load…
–
CVSS
9.2%
EPSS
No
On KEV
Description
The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)9.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W7
Windows 7 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2003 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
r2; r2 · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0001
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html
secunia.com
http://secunia.com/advisories/47356
www.securityfocus.com
http://www.securityfocus.com/bid/51296
www.securitytracker.com
http://www.securitytracker.com/id?1026493
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-010A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-001
More from Windows 7
9.8
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability
8.8
CVE-2022-41128
Windows Scripting Languages Remote Code Execution Vulnerability
8.8
CVE-2021-40444
Microsoft MSHTML Remote Code Execution Vulnerability