NVD

Id
43723  
Name
CVE-2012-1856  
Description
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-14  
Modified Date
2013-11-02  
Seq
2012-1856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
219667 43723 CVE-2012-1856 oval:org.mitre.oval:def:15447  View
219668 43723 CVE-2012-1856 MS12-060  View
219669 43723 CVE-2012-1856 TA12-227A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27923 JVNDB-2012-003630 複数の Microsoft 製品の MSCOMCTL.OCX における任意のコードを実行される脆弱性 複数の Microsoft 製品の MSCOMCTL.OCX 内のコモンコントロールの TabStrip ActiveX コントロールには、任意のコードを実行される脆弱性が存在します。 CVE-2012-1856 55094 CVE-2012-1856 43723 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003630.html 2012-08-14 2015-05-11 View