High severity · published Apr 10, 2012
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
RansomwareIn wildKEV
8.8
CVSS
100%
EPSS
Yes
On KEV
Description
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)100.0% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 3, 2021
Federal remediation dueMay 3, 2022
Ransomware campaign useKnown
Affected products
Which versions
OF
Office · Microsoft
2003; 2007; 2007; 2010; 2010 · source: NVD
BS
Biztalk Server · Microsoft
2002 · source: NVD
CS
Commerce Server · Microsoft
2002; 2007 · source: NVD
CS
Commerce Server 2009 · Microsoft
r2 · source: NVD
OW
Office Web Components · Microsoft
2003 · source: NVD
SS
Sql Server 2000 · Microsoft
All versions, or not specified · source: NVD
SS
Sql Server 2005 · Microsoft
All versions, or not specified · source: NVD
SS
Sql Server 2008 · Microsoft
r2; r2 · source: NVD
VB
Visual Basic · Microsoft
6.0 · source: NVD
VF
Visual Foxpro · Microsoft
8.0; 9.0 · source: NVD
MS
MSCOMCTL.OCX · Microsoft
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0158
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0158
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securitytracker.com/id?1026902
vdb-entry
http://www.securitytracker.com/id?1026899
third-party-advisory
http://www.us-cert.gov/cas/techalerts/TA12-101A.html
vdb-entry
http://www.securitytracker.com/id?1026904
vdb-entry
http://www.securitytracker.com/id?1026903
vdb-entry
http://www.securitytracker.com/id?1026905
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability