ByteOS Network

Vulnerability Details :

CVE-2012-0158

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-10 Apr, 2012 | 21:00

Updated At-30 Jul, 2025 | 01:47

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Known Exploited Vulnerabilities (KEV)

cisa.gov

Vendor:

Microsoft Corporation

Product:MSCOMCTL.OCX

Added At:03 Nov, 2021

Due At:03 May, 2022

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Used in Ransomware

Unknown

CWE

CWE-94

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2012-0158

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:10 Apr, 2012 | 21:00

Updated At:30 Jul, 2025 | 01:47

▼CVE Numbering Authority (CNA)

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id?1026902	vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1026899	vdb-entry x_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA12-101A.html	third-party-advisory x_refsource_CERT
http://www.securitytracker.com/id?1026904	vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1026903	vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1026905	vdb-entry x_refsource_SECTRACK
http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/	x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027	vendor-advisory x_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462	vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/bid/52911	vdb-entry x_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/74372	vdb-entry x_refsource_XF
http://www.securitytracker.com/id?1026900	vdb-entry x_refsource_SECTRACK

Hyperlink: http://www.securitytracker.com/id?1026902

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securitytracker.com/id?1026899

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-101A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securitytracker.com/id?1026904

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securitytracker.com/id?1026903

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securitytracker.com/id?1026905

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/

Resource:

x_refsource_MISC

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/bid/52911

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74372

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.securitytracker.com/id?1026900

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id?1026902	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securitytracker.com/id?1026899	vdb-entry x_refsource_SECTRACK x_transferred
http://www.us-cert.gov/cas/techalerts/TA12-101A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securitytracker.com/id?1026904	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securitytracker.com/id?1026903	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securitytracker.com/id?1026905	vdb-entry x_refsource_SECTRACK x_transferred
http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/	x_refsource_MISC x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027	vendor-advisory x_refsource_MS x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/bid/52911	vdb-entry x_refsource_BID x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/74372	vdb-entry x_refsource_XF x_transferred
http://www.securitytracker.com/id?1026900	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://www.securitytracker.com/id?1026902

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026899

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-101A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026904

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026903

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026905

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/bid/52911

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74372

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026900

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2021-11-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0158

Timeline

Event	Date
CVE-2012-0158 added to CISA KEV	2021-11-03 00:00:00

Event: CVE-2012-0158 added to CISA KEV

Date: 2021-11-03 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:10 Apr, 2012 | 21:55

Updated At:11 Apr, 2025 | 00:51

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2021-11-03	2022-05-03	Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Date Added: 2021-11-03

Due Date: 2022-05-03

Vulnerability Name: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>office>>2003

cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*

Microsoft Corporation

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*

Microsoft Corporation

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

Microsoft Corporation

>>office>>2010

cpe:2.3:a:microsoft:office:2010:*:*:*:*:*:x86:*

Microsoft Corporation

>>office>>2010

cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:*

Microsoft Corporation

>>office_web_components>>2003

cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2000>>-

cpe:2.3:a:microsoft:sql_server_2000:-:sp4:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2005>>-

cpe:2.3:a:microsoft:sql_server_2005:-:sp4:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2008>>-

cpe:2.3:a:microsoft:sql_server_2008:-:sp2:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2008>>-

cpe:2.3:a:microsoft:sql_server_2008:-:sp3:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2008>>r2

cpe:2.3:a:microsoft:sql_server_2008:r2:-:*:*:*:*:*:*

Microsoft Corporation

>>sql_server_2008>>r2

cpe:2.3:a:microsoft:sql_server_2008:r2:sp1:*:*:*:*:*:*

Microsoft Corporation

>>biztalk_server>>2002

cpe:2.3:a:microsoft:biztalk_server:2002:sp1:*:*:*:*:*:*

Microsoft Corporation

>>commerce_server>>2002

cpe:2.3:a:microsoft:commerce_server:2002:sp4:*:*:*:*:*:*

Microsoft Corporation

>>commerce_server>>2007

cpe:2.3:a:microsoft:commerce_server:2007:sp2:*:*:*:*:*:*

Microsoft Corporation

>>commerce_server_2009>>-

cpe:2.3:a:microsoft:commerce_server_2009:-:*:*:*:*:*:*:*

Microsoft Corporation

>>commerce_server_2009>>r2

cpe:2.3:a:microsoft:commerce_server_2009:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>visual_basic>>6.0

cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*

Microsoft Corporation

>>visual_foxpro>>8.0

cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*

Microsoft Corporation

>>visual_foxpro>>9.0

cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov
CWE-94	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-94

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/	secure@microsoft.com	Broken Link
http://www.securityfocus.com/bid/52911	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026899	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026900	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026902	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026903	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026904	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026905	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-101A.html	secure@microsoft.com	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027	secure@microsoft.com	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74372	secure@microsoft.com	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462	secure@microsoft.com	Broken Link
http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/52911	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026899	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026900	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026902	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026903	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026904	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1026905	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-101A.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74372	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462	af854a3a-2127-422b-91ae-364da2661108	Broken Link

Hyperlink: http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/52911

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026899

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026900

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026902

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026903

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026904

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1026905

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-101A.html

Source: secure@microsoft.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/74372

Source: secure@microsoft.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15462

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce/