CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-08-15
Microsoft MSCOMCTL.OCX TabStrip ActiveX Control Remote Code Execution Vulnerability (CVE-2012-1856)
[Affected Scope] Systems running Microsoft Office 2003/2007/2010, SQL Server 2000/2005/2008, or Visual Basic 6.0 Runtime utilizing MSCOMCTL.OCX
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by corrupting system memory via crafted documents or web pages
[Mitigation] Apply the official Microsoft MS12-060 security update or configure ActiveX Kill Bits for the vulnerable TabStrip control