Lucene search
Immunity CanvasMS12_027HistoryApr 10, 2012 - 9:55 p.m.
Immunity Canvas: MS12_027
2012-04-1021:55:00
Immunity Canvas
exploitlist.immunityinc.com
172
EPSS
0.974
Percentile
99.9%
| Name | ms12_027 |
|---|---|
| CVE | CVE-2012-0158 Exploit Pack |
| VENDOR: Microsoft | |
| Notes: |
You shoud manually start a Universal listener for this exploit.
The listener IP and PORT should be declared in the module configuration
dialog.
Tested on:
- Windows XP Professional SP3 English with Office 2010 Standard
- Windows 7 English.
The Universal Windows version needs the target to have Word opened
for a few seconds before executing the file.
Usage:
Generate rtf file and send to target.
VersionsAffected: Office 2003 to Office 2010 SP1
Repeatability:
MSADV: MS12-027
References: http://technet.microsoft.com/en-us/security/bulletin/ms12-027
CVE Url: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0158
Date public: 04/10/2012
CVSS: 9.3
Related
checkpoint_advisories
checkpoint_advisories
threatpost
threatpost
NetTraveler Attackers Using PRISM Program as Bait
2013-06-18 10:00:42
Safe Targeted Espionage Campaign Borrows from Cybercriminals
2013-05-20 14:47:14
Tool Scans for RTF Files Spreading Malware in Targeted Attacks
2012-09-14 17:25:21
thn
thn
Beware! Cyber Criminals may spoil your Valentine's Day
2014-02-10 22:26:00
Surveillance malware targets 350 high profile victims in 40 countries
2013-06-04 16:39:00
Terminator RAT became more sophisticated in recent APT attacks
2013-10-27 05:37:00
exploitdb
exploitdb
Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)
2012-04-25 00:00:00
attackerkb
attackerkb
CVE-2012-0158
2012-04-10 00:00:00
Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability
2012-08-15 00:00:00
openvas
openvas
saint
saint
Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability
2012-04-12 00:00:00
Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability
2012-04-12 00:00:00
Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability
2012-04-12 00:00:00
fireeye
fireeye
cve
cve
CVE-2012-0158
2012-04-10 21:55:01
zdt
zdt
MS12-027 - Office 2010 DEP/ASLR Bypass Exploit
2014-01-28 00:00:00
MS12-027 MSCOMCTL ActiveX Buffer Overflow
2012-04-25 00:00:00
packetstorm
packetstorm
MS12-027 MSCOMCTL ActiveX Buffer Overflow
2012-04-25 00:00:00
cvelist
cvelist
CVE-2012-0158
2012-04-10 21:00:00
nessus
nessus
cisa_kev
cisa_kev
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
2021-11-03 00:00:00
mskb
mskb
metasploit
metasploit
MS12-027 MSCOMCTL ActiveX Buffer Overflow
2012-04-23 20:59:25
prion
prion
Design/Logic Flaw
2012-04-10 21:55:00
nvd
nvd
CVE-2012-0158
2012-04-10 21:55:01
talosblog
talosblog
When combining exploits for added effect goes wrong
2017-08-14 09:55:00
myhack58
myhack58
malwarebytes
malwarebytes
seebug
seebug
Microsoft Office 内存损坏漏洞(CVE-2015-1641)
2015-12-31 00:00:00
carbonblack
carbonblack
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2012-04-23 00:00:00
securelist
securelist
Cycldek: Bridging the (air) gap
2020-06-03 10:00:32
ics
ics
Top 10 Routinely Exploited Vulnerabilities
2020-05-12 12:00:00
Potential for China Cyber Response to Heightened U.S.–China Tensions
2020-10-20 12:00:00
qualysblog
qualysblog
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
Part 2: An In-Depth Look at the Latest Vulnerability Threat Landscape (Attackers’ Edition)
2023-07-18 13:38:53
Qualys Top 20 Most Exploited Vulnerabilities
2023-09-04 14:00:00
