Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-0003
HistoryJan 10, 2012 - 9:55 p.m.

CVE-2012-0003

2012-01-1021:55:03
[email protected]
web.nvd.nist.gov
54
cve-2012-0003
winmm.dll
windows media player
wmp
microsoft windows xp
server 2003
vista
server 2008
remote code execution
midi file vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via a crafted MIDI file, aka β€œMIDI Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008sp2x32
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistasp2
OR
microsoftwindows_xpsp2professional_x64
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch2005sp3media_center

Related

checkpoint_advisories 3
symantec 1
prion 1
saint 4
canvas 1
seebug 3
threatpost 1
packetstorm 1
nvd 1
cvelist 1
exploitdb 1
openvas 2
attackerkb 1
mskb 1
nessus 1
securityvulns 1
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Media Player MIDI Code Execution (MS12-004) - Ver2 (CVE-2012-0003)
2015-05-18 00:00:00
Microsoft Windows Media Player MIDI Code Execution (MS12-004; CVE-2012-0003)
2012-01-10 00:00:00
Microsoft Windows Media Player MIDI Remote Code Execution (MS12-004; CVE-2012-0003)
2020-07-19 00:00:00
symantec
symantec
Microsoft Windows Media Player 'winmm.dll' MIDI File Parsing Remote Buffer Overflow Vulnerability
2012-01-10 00:00:00
prion
prion
Remote code execution
2012-01-10 21:55:00
saint
saint
Windows Media MIDI Invalid Channel
2012-02-06 00:00:00
Windows Media MIDI Invalid Channel
2012-02-06 00:00:00
Windows Media MIDI Invalid Channel
2012-02-06 00:00:00
canvas
canvas
Immunity Canvas: MS12_004
2012-01-10 21:55:00
seebug
seebug
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
2014-07-01 00:00:00
midiOutPlayNextPolyEvent Heap Overflow(MS12-004)
2012-01-29 00:00:00
Microsoft Windows Media Player β€˜winmm.dll’ MIDIζ–‡δ»Άθ§£ζžθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž(CVE-2012-0003)
2012-01-30 00:00:00
threatpost
threatpost
Attackers Targeting Windows Media Bug With Malware
2012-01-27 13:03:33
packetstorm
packetstorm
MS12-004 midiOutPlayNextPolyEvent Heap Overflow
2012-01-28 00:00:00
nvd
nvd
CVE-2012-0003
2012-01-10 21:55:03
cvelist
cvelist
CVE-2012-0003
2012-01-10 21:00:00
exploitdb
exploitdb
Microsoft Windows - midiOutPlayNextPolyEvent Heap Overflow (MS12-004) (Metasploit)
2012-01-28 00:00:00
openvas
openvas
Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
2012-01-11 00:00:00
Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)
2012-01-11 00:00:00
attackerkb
attackerkb
Microsoft Internet Explorer Use-After-Free Vulnerability
2014-02-14 00:00:00
mskb
mskb
MS12-004: Vulnerabilities in Windows Media could allow remote code execution: January 10, 2012
2012-01-10 00:00:00
nessus
nessus
MS12-004: Vulnerabilities in Windows Media Could Allow Remote Code Execution (2636391)
2012-01-10 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2012-01-21 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2012-0003
checkpoint_advisories3symantec1prion1saint4canvas1seebug3threatpost1packetstorm1nvd1cvelist1exploitdb1openvas2attackerkb1mskb1nessus1securityvulns1