High severity · published Aug 15, 2012
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
In wildKEV
8.8
CVSS
72%
EPSS
Yes
On KEV
Description
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)72.0% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 3, 2022
Federal remediation dueMar 24, 2022
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2003; 2007; 2007; 2010 · source: NVD, KEV
CS
Commerce Server · Microsoft
2002; 2007; 2009; 2009 · source: NVD
HI
Host Integration Server · Microsoft
2004 · source: NVD
OW
Office Web Components · Microsoft
2003 · source: NVD
SS
Sql Server · Microsoft
2000; 2000; 2005; 2005; 2008; 2008; +2 more · source: NVD
VB
Visual Basic · Microsoft
6.0 · source: NVD
VF
Visual Foxpro · Microsoft
8.0; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1856
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1856
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060
vdb-entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447
third-party-advisory
http://www.us-cert.gov/cas/techalerts/TA12-227A.html
vdb-entry
http://www.securityfocus.com/bid/54948
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability