|
|
|
|
| |
Credit:
|
| |
Vulnerable Systems:
* Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1;
* Microsoft Office 2003 Web Components SP3;
* Microsoft SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2;
* Microsoft BizTalk Server 2002 SP1;
* Microsoft Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2;
* Microsoft Visual FoxPro 8.0 SP1 and 9.0 SP2;
* Microsoft Visual Basic 6.0 Runtime
A remote code execution vulnerability exists in the Windows common controls. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
Vendor Status:
Microsoft had issued an update for this vulnerability
Patch Availability:
http://technet.microsoft.com/en-us/security/bulletin/ms12-027
CVE Information:
CVE-2012-0158
Disclosure Timeline:
Published: Tuesday, April 10, 2012
|
|
|
|
|
