Vulnerability Details : CVE-2012-0158

Exploit prediction scoring system (EPSS) score for CVE-2012-0158

Metasploit modules for CVE-2012-0158

• MS12-027 MSCOMCTL ActiveX Buffer Overflow

  Disclosure Date : 2012-04-10

  exploit/windows/fileformat/ms12_027_mscomctl_bof

  This module exploits a stack buffer overflow in MSCOMCTL.OCX. It uses a malicious RTF to embed the specially crafted MSComctlLib.ListViewCtrl.2 Control as exploited in the wild on April 2012. This module targets Office 2007 and Office 2010 targets. The DEP/ASLR bypass on Office 2010 is done with the Ikazuchi ROP chain proposed by Abysssec. This chain uses "msgr3en.dll", which will load after office got load, so the malicious file must be loaded through "File / Open" to achieve exploitation. Authors: - Unknown - juan vazquez <[email protected]> - sinn3r <[email protected]>

  More information

CVSS scores for CVE-2012-0158

CWE ids for CVE-2012-0158

• CWE-94 Improper Control of Generation of Code ('Code Injection')
  The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
  Assigned by: [email protected] (Primary)

References for CVE-2012-0158

Products affected by CVE-2012-0158