Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-0165
HistoryMay 09, 2012 - 12:55 a.m.

CVE-2012-0165

2012-05-0900:55:01
CWE-20
[email protected]
web.nvd.nist.gov
4

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.652

Percentile

97.9%

JSON

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka β€œGDI+ Record Type Vulnerability.”

Affected configurations

Nvd
Node
microsoftofficeMatch2003sp3
OR
microsoftofficeMatch2007sp2
OR
microsoftofficeMatch2007sp3
OR
microsoftofficeMatch2010
OR
microsoftofficeMatch2010sp1
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_vistaMatch-sp2

Related

cve 1
seebug 1
prion 1
cvelist 1
symantec 1
checkpoint_advisories 1
openvas 2
mskb 1
nessus 1
securityvulns 1
cve
cve
CVE-2012-0165
2012-05-09 00:55:01
seebug
seebug
Microsoft GDI+ EMFε›Ύε½’ε€„η†θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž(MS12-034)
2012-05-09 00:00:00
prion
prion
Design/Logic Flaw
2012-05-09 00:55:00
cvelist
cvelist
CVE-2012-0165
2012-05-09 00:00:00
symantec
symantec
Microsoft GDI+ CVE-2012-0165 EMF Image Processing Remote Code Execution Vulnerability
2012-05-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows GDI+ Record Type Code Execution (MS12-034; CVE-2012-0165)
2012-05-08 00:00:00
openvas
openvas
MS Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
2012-05-09 00:00:00
Microsoft Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)
2012-05-09 00:00:00
mskb
mskb
MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight: May 8, 2012
2012-05-08 00:00:00
nessus
nessus
MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)
2012-05-09 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2012-08-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.652

Percentile

97.9%

JSON
Related for NVD:CVE-2012-0165
cve1seebug1prion1cvelist1symantec1checkpoint_advisories1openvas2mskb1nessus1securityvulns1