High severity · published Apr 10, 2012
CVE-2012-0151
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
In wildKEV
7.8
CVSS
87.7%
EPSS
Yes
On KEV
Description
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)87.7% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 8, 2022
Federal remediation dueJun 22, 2022
Ransomware campaign useNot known
Affected products
Which versions
WI
Windows · Microsoft
All versions, or not specified · source: KEV
W7
Windows 7 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2003 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
r2; r2; r2; r2 · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0151
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securitytracker.com/id?1026906
vdb-entry
http://osvdb.org/81135
third-party-advisory
http://www.us-cert.gov/cas/techalerts/TA12-101A.html
third-party-advisory
http://secunia.com/advisories/48581
vendor-advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-024
vdb-entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15594
More from Windows
10.0
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
9.8
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
9.8
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability