CVE-2012-1889 : Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Published 2012-06-13 04:46:46

Updated 2023-12-07 18:38:57

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: OverflowMemory CorruptionExecute codeDenial of service

Products affected by CVE-2012-1889

Microsoft » Xml Core Services » Version: 3.0
cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 7 » X64 Edition
When used together with: Microsoft » Windows 7 » X86 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X86 Edition
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X86 Edition
When used together with: Microsoft » Windows Server 2003 » Update SP2
When used together with: Microsoft » Windows Server 2008 » Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X64 Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X86 Edition
When used together with: Microsoft » Windows Server 2008 » Version: N/A Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 X64 Edition
When used together with: Microsoft » Windows Vista » Update SP2
When used together with: Microsoft » Windows Vista » Version: N/A Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
When used together with: Microsoft » Windows Xp » Version: N/A Update SP2 X64 Edition
Microsoft » Xml Core Services » Version: 4.0
cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 7 » X64 Edition
When used together with: Microsoft » Windows 7 » X86 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X86 Edition
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X86 Edition
When used together with: Microsoft » Windows Server 2003 » Update SP2
When used together with: Microsoft » Windows Server 2008 » Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X64 Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X86 Edition
When used together with: Microsoft » Windows Server 2008 » Version: N/A Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 X64 Edition
When used together with: Microsoft » Windows Vista » Update SP2
When used together with: Microsoft » Windows Vista » Version: N/A Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
When used together with: Microsoft » Windows Xp » Version: N/A Update SP2 X64 Edition
Microsoft » Xml Core Services » Version: 6.0
cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 7 » X64 Edition
When used together with: Microsoft » Windows 7 » X86 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Update SP1 X86 Edition
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X64 Edition
When used together with: Microsoft » Windows 7 » Version: N/A Update SP1 X86 Edition
When used together with: Microsoft » Windows Server 2003 » Update SP2
When used together with: Microsoft » Windows Server 2008 » Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X64 Edition
When used together with: Microsoft » Windows Server 2008 » Update SP2 X86 Edition
When used together with: Microsoft » Windows Server 2008 » Version: N/A Update SP2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 Itanium Edition
When used together with: Microsoft » Windows Server 2008 » Version: R2 X64 Edition
When used together with: Microsoft » Windows Vista » Update SP2
When used together with: Microsoft » Windows Vista » Version: N/A Update SP2
When used together with: Microsoft » Windows Xp » Update SP3
When used together with: Microsoft » Windows Xp » Version: N/A Update SP2 X64 Edition
Microsoft » Xml Core Services » Version: 5.0
cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Office » Version: 2003 Update SP3
When used together with: Microsoft » Office » Version: 2007 Update SP2
When used together with: Microsoft » Office » Version: 2007 Update SP3

CVE-2012-1889 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Microsoft XML Core Services Memory Corruption Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2012-1889

Added on 2022-06-08 Action due date 2022-06-22

Exploit prediction scoring system (EPSS) score for CVE-2012-1889

EPSS FAQ

96.98%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2012-1889

MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption

Disclosure Date: 2012-06-12

First seen: 2020-04-26

exploit/windows/browser/msxml_get_definition_code_exec

This module exploits a memory corruption flaw in Microsoft XML Core Services when trying to access an uninitialized Node with the getDefinition API, which may corrupt memory allowing remote code execution. Authors: - inking26 - binjo - sinn3r <sinn3r@metasploi

More information

CVSS scores for CVE-2012-1889

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2012-1889

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-1889

http://technet.microsoft.com/security/advisory/2719615

Microsoft Security Advisory 2719615 | Microsoft Docs
Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA12-174A.html

Microsoft XML Core Services Attack Activity | CISA
US Government Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195

Repository / Oval Repository
http://www.us-cert.gov/cas/techalerts/TA12-192A.html

Microsoft Updates for Multiple Vulnerabilities | CISA
US Government Resource

CVEs referencing this url
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043

Microsoft Security Bulletin MS12-043 - Critical | Microsoft Docs

Jump to

Vulnerability Details : CVE-2012-1889