NVD

Id
42162  
Name
CVE-2012-0013  
Description
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted ClickOnce application in a Microsoft Office document, related to .application files, aka "Assembly Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-01-10  
Modified Date
2013-03-06  
Seq
2012-0013  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212799 42162 CVE-2012-0013 oval:org.mitre.oval:def:14197  View
212800 42162 CVE-2012-0013 MS12-005  View
212801 42162 CVE-2012-0013 51284  View
212802 42162 CVE-2012-0013 1026497  View
212803 42162 CVE-2012-0013 TA12-010A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25341 JVNDB-2012-001048 複数の Microsoft Windows 製品の Windows Packager 設定における任意のコードを実行される脆弱性 複数の Microsoft Windows 製品の Windows Packager 設定には、.application ファイルに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0013 53251 CVE-2012-0013 42162 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001048.html 2012-01-10 2012-01-13 View