(MS12-027) Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2664258)
Publish date: April 11, 2012
Severity: CRITICAL
CVE Identifier: CVE-2012-0158
Advisory Date: APR 11, 2012
DESCRIPTION
This particular security update resolves a vulnerability in Windows common controls. The said function is found in several Microsoft applications. When the vulnerability is successfully exploited, a remote attacker could execute code on the vulnerable system.
SOLUTION
AFFECTED SOFTWARE AND VERSION
- Microsoft Office 2003 Service Pack 3
- Microsoft Office 2003 Web Components Service Pack 3
- Microsoft Office 2007 Service Pack 2
- Microsoft Office 2007 Service Pack 3
- Microsoft Office 2010 (32-bit editions)
- Microsoft Office 2010 Service Pack 1 (32-bit editions)
- Microsoft SQL Server 2000 Analysis Services Service Pack 4
- Microsoft SQL Server 2000 Service Pack 4
- Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 4
- Microsoft SQL Server 2005 for 32-bit Systems Service Pack 4
- Microsoft SQL Server 2005 for Itanium-based Systems Service Pack 4
- Microsoft SQL Server 2005 for x64-based Systems Service Pack 4
- Microsoft SQL Server 2008 for 32-bit Systems Service Pack 2
- Microsoft SQL Server 2008 for 32-bit Systems Service Pack 3
- Microsoft SQL Server 2008 for x64-based Systems Service Pack 2
- Microsoft SQL Server 2008 for x64-based Systems Service Pack 3
- Microsoft SQL Server 2008 for Itanium-based Systems Service Pack 2
- Microsoft SQL Server 2008 for Itanium-based Systems Service Pack 3
- Microsoft SQL Server 2008 R2 for 32-bit Systems
- Microsoft SQL Server 2008 R2 for x64-based Systems
- Microsoft SQL Server 2008 R2 for Itanium-based Systems
- Microsoft BizTalk Server 2002 Service Pack 1
- Microsoft Commerce Server 2002 Service Pack 4
- Microsoft Commerce Server 2007 Service Pack 2
- Microsoft Commerce Server 2009
- Microsoft Commerce Server 2009 R2
- Microsoft Visual FoxPro 8.0 Service Pack 1
- Microsoft Visual FoxPro 9.0 Service Pack 2
- Visual Basic 6.0 Runtime
Featured Stories
Abusing Argo CD, Helm, and Artifact Hub: An Analysis of Supply Chain Attacks in Cloud-Native ApplicationsWe provide an overview of cloud-native tools and examine how cybercriminals can exploit their vulnerabilities to launch supply chain attacks.Read more
Trends and Shifts in the Underground N-Day Exploit MarketOur two-year research provides insights into the life cycle of exploits, the types of exploit buyers and sellers, and the business models that are reshaping the underground exploit market.Read more
The Nightmares of Patch Management: The Status Quo and BeyondWe discuss the challenges that organizations face in managing endpoint and server patches.Read more
Identifying Weak Parts of a Supply ChainMalicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable.Read more