Computer Security
[EN] securityvulns.ru no-pyccku


Microsoft libraries security vulnerabilities
updated since 20.08.2012
Published:18.09.2012
Source:
SecurityVulns ID:12517
Type:library
Threat Level:
5/10
Description:MSCOMCTL.OCX ActiveX code execution.
Affected:MICROSOFT : SQL Server 2000
 MICROSOFT : Commerce Server 2002
 MICROSOFT : Office 2003
 MICROSOFT : Office 2007
 MICROSOFT : Visual Basic 6.0
 MICROSOFT : SQL Server 2005
 MICROSOFT : Host Integration Server 2004
 MICROSOFT : Visual FoxPro 8.0
 MICROSOFT : Visual FoxPro 9.0
 MICROSOFT : Office 2010
 MICROSOFT : SQL Server 2008
 MICROSOFT : Commerce Server 2007
 MICROSOFT : Commerce Server 2009
CVE:CVE-2012-1856 (The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability.")
Original documentdocumentVUPEN Security Research, VUPEN - Microsoft Windows Common Controls MSCOMCTL.OCX Use-after-free (CVE-2012-1856 / MS12-060) (18.09.2012)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod