CVE-2012-0016

🗓️ 13 Mar 2012 21:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 138 Views🌐 WEB

Untrusted search path vulnerability in Microsoft Expression Design allows local users to gain privileges via a Trojan horse DLL

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2012-0016	27 Nov 201300:00	–	circl
Check Point Advisories	Microsoft Expression Design Insecure Library Loading (MS12-022; CVE-2012-0016)	12 Mar 201200:00	–	checkpoint_advisories
Cvelist	CVE-2012-0016	13 Mar 201221:00	–	cvelist
Microsoft KB	MS12-022: Vulnerability in Expression Design could allow remote code execution: March 13, 2012	13 Mar 201200:00	–	mskb
NVD	CVE-2012-0016	13 Mar 201221:55	–	nvd
OpenVAS	Microsoft Expression Design Remote Code Execution Vulnerability (2651018)	14 Mar 201200:00	–	openvas
OpenVAS	Microsoft Expression Design Remote Code Execution Vulnerability (2651018)	14 Mar 201200:00	–	openvas
Prion	Design/Logic Flaw	13 Mar 201221:55	–	prion
Saint	Microsoft Expression Design wintab32.dll Library Loading	25 Apr 201200:00	–	saint
Saint	Microsoft Expression Design wintab32.dll Library Loading	25 Apr 201200:00	–	saint

NVD

Node

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-022
us-cert	www.us-cert.gov/cas/techalerts/TA12-073A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14973

Parameter	Position	Path	Description	CWE
.xpr	path	/technet/security/	Untrusted search path vulnerability via Trojan horse DLL in current working directory when .xpr or .DESIGN files are present	CWE-427
.DESIGN	path	/technet/security/	Untrusted search path vulnerability via Trojan horse DLL in current working directory when .xpr or .DESIGN files are present	CWE-427

16 Jun 2026 23:36Current

6.2Medium risk

Vulners AI Score6.2

CVSS 29.3

EPSS0.21892