Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2012-1858
HistoryJun 12, 2012 - 10:55 p.m.

CVE-2012-1858

2012-06-1222:55:01
CWE-200
microsoft
web.nvd.nist.gov
149
cve-2012-1858
nvd
microsoft
internet explorer
xss
html sanitization vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON

The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka β€œHTML Sanitization Vulnerability.”

Affected configurations

Nvd
Node
microsoftlyncMatch2010attendee
OR
microsoftlyncMatch2010x64
OR
microsoftlyncMatch2010x86
OR
microsoftoffice_communicatorMatch2007r2
Node
microsoftinternet_explorerMatch8
AND
microsoftwindows_2003_serversp2
OR
microsoftwindows_7x86
OR
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008r2itanium
OR
microsoftwindows_server_2008r2x64
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_vistasp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch9
AND
microsoftwindows_7x64
OR
microsoftwindows_7x86
OR
microsoftwindows_7sp1x64
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp2
VendorProductVersionCPE
microsoftlync2010cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*
microsoftlync2010cpe:2.3:a:microsoft:lync:2010:*:x64:*:*:*:*:*
microsoftlync2010cpe:2.3:a:microsoft:lync:2010:*:x86:*:*:*:*:*
microsoftoffice_communicator2007cpe:2.3:a:microsoft:office_communicator:2007:r2:*:*:*:*:*:*
microsoftinternet_explorer8cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
Rows per page:
1-10 of 241

Related

checkpoint_advisories 3
cvelist 1
seebug 2
exploitpack 1
symantec 1
packetstorm 1
prion 1
exploitdb 1
zdt 1
nvd 1
openvas 5
nessus 3
securityvulns 3
mskb 2
checkpoint_advisories
checkpoint_advisories
Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)
2012-07-10 00:00:00
Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)
2015-05-18 00:00:00
Internet Explorer HTML Sanitization Information Disclosure (MS12-039; CVE-2012-1858)
2012-06-12 00:00:00
cvelist
cvelist
CVE-2012-1858
2012-06-12 22:00:00
seebug
seebug
Microsoft Lync/Office Communicator HTMLδ»£η θΏ‡ζ»€ζΌζ΄ž (CVE-2012-1858) (MS12-039)
2012-06-13 00:00:00
IE9, SharePoint, Lync toStaticHTML HTML Sanitizing Bypass
2014-07-01 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer 9 SharePoint Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037MS12-039MS12-050)
2012-07-12 00:00:00
symantec
symantec
Microsoft Internet Explorer And Microsoft Lync HTML Sanitizing Information Disclosure Vulnerability
2012-06-12 00:00:00
packetstorm
packetstorm
toStaticHTML HTML Sanitizing Bypass
2012-07-11 00:00:00
prion
prion
Cross site scripting
2012-06-12 22:55:00
exploitdb
exploitdb
Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)
2012-07-12 00:00:00
zdt
zdt
IE9 / SharePoint / Lync toStaticHTML HTML Sanitizing Bypass
2012-07-11 00:00:00
nvd
nvd
CVE-2012-1858
2012-06-12 22:55:01
openvas
openvas
Microsoft Lync Remote Code Execution Vulnerabilities (2707956)
2012-06-13 00:00:00
Microsoft Lync Remote Code Execution Vulnerabilities (2707956)
2012-06-13 00:00:00
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
2012-07-11 00:00:00
nessus
nessus
MS12-039: Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)
2012-06-13 00:00:00
MS12-050: Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)
2012-07-11 00:00:00
MS12-037: Cumulative Security Update for Internet Explorer (2699988)
2012-06-13 00:00:00
securityvulns
securityvulns
Mictosoft Lync multiple security vulnerabilities
2012-06-13 00:00:00
Microsoft Sharepoint multiple security vulnerabilities
2012-07-11 00:00:00
Microsoft Internet Explorer multiple security vulnerabilities
2012-06-25 00:00:00
mskb
mskb
MS12-050: Vulnerabilities in SharePoint could allow elevation of privilege: July 10, 2012
2012-07-10 00:00:00
MS12-037: Cumulative Security Update for Internet Explorer: June 12, 2012
2012-06-12 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON
Related for CVE-2012-1858
checkpoint_advisories3cvelist1seebug2exploitpack1symantec1packetstorm1prion1exploitdb1zdt1nvd1openvas5nessus3securityvulns3mskb2