CVE-2012-1856

🗓️ 15 Aug 2012 01:55:01Reported by [email protected]Type

Vulnerability in Microsoft Office, SQL Server, and other Microsoft products allows remote code execution via crafted document or web page

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability	15 Aug 201200:00	–	attackerkb
Circl	CVE-2012-1856	25 Aug 201509:05	–	circl
CISA KEV Catalog	Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability	3 Mar 202200:00	–	cisa_kev
Check Point Advisories	Microsoft Windows Common Controls Remote Code Execution (MS12-060; CVE-2012-1856)	14 Aug 201200:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)	31 Mar 201400:00	–	checkpoint_advisories
CVE	CVE-2012-1856	15 Aug 201201:00	–	cve
Cvelist	CVE-2012-1856	15 Aug 201201:00	–	cvelist
Microsoft KB	MS12-060: Vulnerability in Windows common controls could allow remote code execution: August 14, 2012	14 Aug 201200:00	–	mskb
myhack58	The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net	13 Jun 201900:00	–	myhack58
OpenVAS	Microsoft Windows Common Controls Remote Code Execution Vulnerability (2720573)	15 Aug 201200:00	–	openvas

NVD

Node

microsoft officeMatch2010sp1x86

microsoft sql_serverMatch2000sp4analysis_services

microsoft sql_serverMatch2005sp3express_advanced_services

Source	Link
securityfocus	www.securityfocus.com/bid/54948
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
us-cert	www.us-cert.gov/cas/techalerts/TA12-227A.html

22 Apr 2026 16:48Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.8

CVSS 29.3

EPSS0.91552