Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability

🗓️ 15 Aug 2012 00:00:00Reported by AttackerKBType

Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability in multiple versions of Microsoft Office, SQL Server, Commerce Server, Host Integration Server, Visual FoxPro, and Visual Basic allows remote attackers to execute arbitrary code via crafted document or web page triggering system-state corruption

Reporter	Title	Published	Views	Family All 129
zdt	MS12-027 MSCOMCTL ActiveX Buffer Overflow	25 Apr 201200:00	–	zdt
zdt	MS12-027 - Office 2010 DEP/ASLR Bypass Exploit	28 Jan 201400:00	–	zdt
Gitee	Exploit for Out-of-bounds Write in Adobe Acrobat	20 Dec 201911:44	–	gitee
ICS	Top 10 Routinely Exploited Vulnerabilities	12 May 202012:00	–	ics
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	CVE-2012-0158	10 Apr 201200:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the MSCOMCTL.OCX component in the Microsoft Office software, the Microsoft SQL Server relational database management system, the Microsoft Commerce Server e-commerce software, and the Microsoft Visual FoxPro database development environment allows a perpetrator to execute arbitrary code.	7 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the “TabStrip” control implementation in the MSCOMCTL.OCX component of the Microsoft Office software suite, Microsoft SQL Server relational database management system, Microsoft Commerce Server e-commerce software, and Microsoft Visual FoxPro database development environment allows a perpetrator to execute arbitrary code.	4 Jul 202200:00	–	bdu_fstec
Carbon Black Blog	Technical Analysis: Hackers Leveraging COVID-19 Pandemic to Launch Phishing Attacks, Fake Apps/Maps, Trojans, Backdoors, Cryptominers, Botnets & Ransomware	19 Mar 202020:48	–	carbonblack

Source	Link
securityfocus	www.securityfocus.com/bid/54948
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447
us-cert	www.us-cert.gov/cas/techalerts/TA12-227A.html

21 Oct 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.8

CVSS 29.3

EPSS0.99976

SSVC