$ cve CVE-2012-0158 JSON

CVE-2012-0158 KEV EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 100% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-03.

Description

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

Scoring

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	99.98% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-94
On CISA KEV	yes — remediate by 2022-05-03
Public exploit	yes
Published	2012-04-10
Last modified	2026-06-16

CISA KEV

Name	Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
Added	2021-11-03
Due	2022-05-03
Vendor / product	Microsoft / MSCOMCTL.OCX
Ransomware use	known

Affected (10)

Vendor	Product
microsoft	biztalk server
microsoft	commerce server
microsoft	commerce server 2009
microsoft	office
microsoft	office web components
microsoft	sql server 2000
microsoft	sql server 2005
microsoft	sql server 2008
microsoft	visual basic
microsoft	visual foxpro

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)	2012-04-25

References

→ the Explorer · watch your stack · NVD