Microsoft Windows Command Injection Vulnerability (CVE-2012-0175)
Severity: CRITICAL
CVE Identifier: CVE-2012-0175,MS12-048
Advisory Date: JUL 21, 2015
DESCRIPTION
The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1005081
Trend Micro Deep Security DPI Rule Name: 1005081 - Vulnerability In Windows Shell Could Allow Remote Code Execution (CVE-2012-0175)
AFFECTED SOFTWARE AND VERSION
- microsoft windows_2003_server
- microsoft windows_7
- microsoft windows_7 -
- microsoft windows_server_2003
- microsoft windows_server_2008
- microsoft windows_server_2008 -
- microsoft windows_server_2008 r2
- microsoft windows_vista
- microsoft windows_xp
- microsoft windows_xp -