Lucene search
K

10 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:0 a.m.23 views

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

9.3CVSS8.3AI score0.91552EPSS
In wildExploits1
NVD
NVD
added 2012/08/15 1:55 a.m.27 views

CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

9.3CVSS7.8AI score0.91552EPSS
Exploits1References5
Prion
Prion
added 2012/08/15 1:55 a.m.25 views

Design/Logic Flaw

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

9.3CVSS8.5AI score0.91552EPSS
Exploits1References4Affected Software7
Vulnrichment
Vulnrichment
added 2012/08/15 1:0 a.m.9 views

CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

8.9AI score0.91552EPSS
Exploits1References4
Cvelist
Cvelist
added 2012/08/15 1:0 a.m.31 views

CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

7.8AI score0.91552EPSS
Exploits1References4
Saint
Saint
added 2012/04/12 12:0 a.m.680 views

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

Added: 04/12/2012 CVE: CVE-2012-0158 BID: 52911 OSVDB: 81125 Background Microsoft Windows bundles various common ActiveX controls in the Common Controls library MSCOMCTL.OCX. Several Windows applications use these controls. Problem Various ActiveX controls in MSCOMCTL.OCX in the Common Controls i...

9.3CVSS7.5AI score0.94289EPSS
Exploits12
Saint
Saint
added 2012/04/12 12:0 a.m.99 views

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

Added: 04/12/2012 CVE: CVE-2012-0158 BID: 52911 OSVDB: 81125 Background Microsoft Windows bundles various common ActiveX controls in the Common Controls library MSCOMCTL.OCX. Several Windows applications use these controls. Problem Various ActiveX controls in MSCOMCTL.OCX in the Common Controls i...

9.3CVSS7.5AI score0.94289EPSS
Exploits12
Prion
Prion
added 2012/04/10 9:55 p.m.28 views

Design/Logic Flaw

The 1 ListView, 2 ListView2, 3 TreeView, and 4 TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1...

9.3CVSS8.6AI score0.94289EPSS
Exploits12References12Affected Software7
Prion
Prion
added 2009/09/08 10:30 p.m.13 views

Design/Logic Flaw

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component...

9.3CVSS7.7AI score0.33983EPSS
Exploits1References6Affected Software2
Prion
Prion
added 2008/12/10 2:0 p.m.14 views

Memory corruption

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code v...

8.5CVSS7.7AI score0.57462EPSS
Exploits0References7Affected Software5
Rows per page
Query Builder