Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2012-0165

🗓️ 09 May 2012 00:00:00Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov👁 179 Views

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, allowing remote attackers to execute arbitrary code via a crafted image.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Check Point Advisories		Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165)
8 May 201200:00
–checkpoint_advisories
Cvelist		CVE-2012-0165
9 May 201200:00
–cvelist
Microsoft KB		MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight: May 8, 2012
8 May 201200:00
–mskb
NVD		CVE-2012-0165
9 May 201200:55
–nvd
OpenVAS		Microsoft Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
9 May 201200:00
–openvas
OpenVAS		MS Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
9 May 201200:00
–openvas
Prion		Design/Logic Flaw
9 May 201200:55
–prion
securityvulns		Microsoft Windows multiple security vulnerabilities
13 Aug 201200:00
–securityvulns
Tenable Nessus		MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)
9 May 201200:00
–nessus
Symantec		Microsoft GDI+ CVE-2012-0165 EMF Image Processing Remote Code Execution Vulnerability
8 May 201200:00
–symantec
Rows per page
NVD
Node
microsoftofficeMatch2003sp3
OR
microsoftofficeMatch2007sp2
OR
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010
OR
microsoftofficeMatch2010sp1
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_vistaMatch-sp2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 Apr 2026 01:13Current
7.5High risk
Vulners AI Score7.5
CVSS 29.3
EPSS0.62114
CWE-20
cve-2012-0165gdi+microsoft windowsvistaserver 2008office 2003office 2007office 2010emf imagesarbitrary code executionvulnerability
179