Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-1889
HistoryJun 13, 2012 - 4:46 a.m.

CVE-2012-1889

2012-06-1304:46:46
CWE-119
[email protected]
web.nvd.nist.gov
966
In Wild
microsoft
xml
core services
vulnerability
memory corruption
remote code execution
cve-2012-1889

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Affected configurations

NVD
Node
microsoftxml_core_servicesMatch3.0
OR
microsoftxml_core_servicesMatch4.0
OR
microsoftxml_core_servicesMatch6.0
AND
microsoftwindows_7x64
OR
microsoftwindows_7x86
OR
microsoftwindows_7sp1x64
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008sp2itanium
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftxml_core_servicesMatch5.0
AND
microsoftofficeMatch2003sp3
OR
microsoftofficeMatch2007sp2
OR
microsoftofficeMatch2007sp3

Related

nessus 2
saint 4
kitploit 1
threatpost 6
prion 1
seebug 2
openvas 2
checkpoint_advisories 3
cisa_kev 1
canvas 1
packetstorm 1
mskb 1
attackerkb 1
thn 2
cvelist 1
symantec 1
cisa 1
nvd 1
securityvulns 1
nessus
nessus
MS12-043: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479)
2012-07-11 00:00:00
MS KB2719615: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
2012-06-13 00:00:00
saint
saint
Microsoft XML Core Services memory corruption
2012-06-27 00:00:00
Microsoft XML Core Services memory corruption
2012-06-27 00:00:00
Microsoft XML Core Services memory corruption
2012-06-27 00:00:00
kitploit
kitploit
PwnStar - Script for multi attack (for all your fake-AP needs!)
2014-07-07 20:46:00
threatpost
threatpost
New Version of Sykipot Trojan Linked To Targeted Attacks On Aerospace Industry
2012-07-03 16:03:35
MSXML Exploit Surfaces in Black Hole Kit
2012-07-03 15:32:34
Large-Scale Water Holing Attack Campaigns Hitting Key Targets
2012-09-25 18:08:44
prion
prion
Memory corruption
2012-06-13 04:46:00
seebug
seebug
MSXMLζœͺεˆε§‹εŒ–ε†…ε­˜η ΄εζΌζ΄ž (MS12-043)
2012-07-11 00:00:00
Microsoft XML Core ServicesθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2012-06-13 00:00:00
openvas
openvas
Microsoft XML Core Services Remote Code Execution Vulnerability (2719615)
2012-06-14 00:00:00
Microsoft XML Core Services Remote Code Execution Vulnerability (2719615)
2012-06-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft XML Core Services Remote Code Execution (KB2719615) - Ver2 (CVE-2012-1889)
2015-05-18 00:00:00
Microsoft XML Core Services Remote Code Execution (KB2719615; CVE-2012-1889)
2012-06-12 00:00:00
Preemptive Protection against Microsoft XML Uninitialized Memory Corruption (MS12-043; CVE-2012-1889)
2012-07-10 00:00:00
cisa_kev
cisa_kev
Microsoft XML Core Services Memory Corruption Vulnerability
2022-06-08 00:00:00
canvas
canvas
Immunity Canvas: MS12_043
2012-06-13 04:46:00
packetstorm
packetstorm
Microsoft XML Core Services MSXML Uninitialized Memory Corruption
2012-06-16 00:00:00
mskb
mskb
MS12-043: Vulnerability in Microsoft XML Core Services could allow remote code execution: August 14, 2012
2012-08-14 00:00:00
attackerkb
attackerkb
CVE-2012-1889 - MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption
2012-06-13 00:00:00
thn
thn
Microsoft to patch three critical vulnerabilities on Tuesday
2012-07-06 13:30:00
Operation Aurora - Other Zero-Day Attacks targeting finance and Energy
2012-09-08 08:36:00
cvelist
cvelist
CVE-2012-1889
2012-06-13 01:00:00
symantec
symantec
Microsoft XML Core Services CVE-2012-1889 Remote Code Execution Vulnerability
2012-06-12 00:00:00
cisa
cisa
Microsoft Releases Security Advisory for Microsoft XML Core Services
2012-06-13 00:00:00
nvd
nvd
CVE-2012-1889
2012-06-13 04:46:46
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2012-08-26 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CVE-2012-1889
nessus2saint4kitploit1threatpost6prion1seebug2openvas2checkpoint_advisories3cisa_kev1canvas1packetstorm1mskb1attackerkb1thn2cvelist1symantec1cisa1nvd1securityvulns1