CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-06-13
Microsoft XML Core Services (MSXML) Uninitialized Memory Access Vulnerability (CVE-2012-1889) Technical Analysis and Mitigation Guide
[Affected Scope] Systems running Microsoft XML Core Services (MSXML) versions 3.0, 4.0, 5.0, and 6.0, primarily accessed via Internet Explorer
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) by enticing a user to visit a specially crafted malicious website
[Mitigation] Apply the official Microsoft security update (MS12-043) immediately, or implement ActiveX Kill Bit workarounds to block the execution of vulnerable MSXML components