CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-04-10
Microsoft Office and SQL Server MSCOMCTL.OCX ActiveX Control Remote Code Execution Vulnerability (CVE-2012-0158)
[Affected Scope] Microsoft Office 2003/2007/2010, SQL Server 2000/2005/2008, and Visual Basic 6.0 Runtime utilizing the MSCOMCTL.OCX library
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by enticing them to open a crafted Office document, RTF file, or malicious website
[Mitigation] Apply the official Microsoft MS12-027 security patch immediately, or configure registry Kill-Bits to disable the vulnerable ActiveX controls