ByteOS Network

Vulnerability Details :

CVE-2012-0159

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-09 May, 2012 | 00:00

Updated At-06 Aug, 2024 | 18:16

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:09 May, 2012 | 00:00

Updated At:06 Aug, 2024 | 18:16

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/49121	third-party-advisory x_refsource_SECUNIA
http://www.us-cert.gov/cas/techalerts/TA12-164A.html	third-party-advisory x_refsource_CERT
http://www.securitytracker.com/id?1027039	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/49122	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667	vdb-entry signature x_refsource_OVAL
http://www.securityfocus.com/bid/53335	vdb-entry x_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/75124	vdb-entry x_refsource_XF
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	vendor-advisory x_refsource_MS
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039	vendor-advisory x_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388	vdb-entry signature x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	third-party-advisory x_refsource_CERT

Hyperlink: http://secunia.com/advisories/49121

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-164A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securitytracker.com/id?1027039

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/49122

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/bid/53335

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75124

Resource:

vdb-entry

x_refsource_XF

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Resource:

third-party-advisory

x_refsource_CERT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/49121	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.us-cert.gov/cas/techalerts/TA12-164A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securitytracker.com/id?1027039	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/49122	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/bid/53335	vdb-entry x_refsource_BID x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/75124	vdb-entry x_refsource_XF x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	vendor-advisory x_refsource_MS x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039	vendor-advisory x_refsource_MS x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388	vdb-entry signature x_refsource_OVAL x_transferred
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	third-party-advisory x_refsource_CERT x_transferred

Hyperlink: http://secunia.com/advisories/49121

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-164A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securitytracker.com/id?1027039

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/49122

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/bid/53335

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75124

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:09 May, 2012 | 00:55

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>office>>2003

cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*

Microsoft Corporation

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*

Microsoft Corporation

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

Microsoft Corporation

>>office>>2010

cpe:2.3:a:microsoft:office:2010:*:*:*:*:*:*:*

Microsoft Corporation

>>office>>2010

cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_7>>*

cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_7>>-

cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*

Microsoft Corporation

>>windows_7>>-

cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*

Microsoft Corporation

>>windows_8>>consumer_preview

cpe:2.3:o:microsoft:windows_8:consumer_preview:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>-

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50401.0

cpe:2.3:a:microsoft:silverlight:4.0.50401.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50524.00

cpe:2.3:a:microsoft:silverlight:4.0.50524.00:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50826.0

cpe:2.3:a:microsoft:silverlight:4.0.50826.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.50917.0

cpe:2.3:a:microsoft:silverlight:4.0.50917.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.51204.0

cpe:2.3:a:microsoft:silverlight:4.0.51204.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60129.0

cpe:2.3:a:microsoft:silverlight:4.0.60129.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60310.0

cpe:2.3:a:microsoft:silverlight:4.0.60310.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60531.0

cpe:2.3:a:microsoft:silverlight:4.0.60531.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.0.60831.0

cpe:2.3:a:microsoft:silverlight:4.0.60831.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>4.1.10111.0

cpe:2.3:a:microsoft:silverlight:4.1.10111.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>5.0.60401.0

cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>5.0.60818.0

cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*

Microsoft Corporation

>>silverlight>>5.0.61118.0

cpe:2.3:a:microsoft:silverlight:5.0.61118.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/49121	secure@microsoft.com	N/A
http://secunia.com/advisories/49122	secure@microsoft.com	N/A
http://www.securityfocus.com/bid/53335	secure@microsoft.com	N/A
http://www.securitytracker.com/id?1027039	secure@microsoft.com	N/A
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	secure@microsoft.com	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-164A.html	secure@microsoft.com	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039	secure@microsoft.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/75124	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667	secure@microsoft.com	N/A
http://secunia.com/advisories/49121	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/49122	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/53335	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1027039	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA12-129A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-164A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/75124	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://secunia.com/advisories/49121

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/49122

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/53335

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1027039

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Source: secure@microsoft.com

Resource:

US Government Resource

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-164A.html

Source: secure@microsoft.com

Resource:

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75124

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/49121

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://secunia.com/advisories/49122

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/53335

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1027039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-164A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/75124

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

3425Records found

CVE-2011-3251

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.11% / 83.81%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4932

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-1.55% / 81.16%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 29.0.0.113 and earlier versions

CWE ID-CWE-416

Use After Free

CVE-2012-1880

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "insertRow Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_2003_server windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2036

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-4.47% / 88.86%

7 Day CHG~0.00%

Published-09 Jun, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation SUSE Google LLC Adobe Inc.Apple Inc.Red Hat, Inc.Linux Kernel Organization, Inc openSUSE

Product-air android enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_eus macos flash_player windows enterprise_linux_workstation opensuse linux_enterprise_desktop linux_kernel enterprise_linux_server n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2012-1523

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Center Element Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_2003_server windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2522

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-51.86% / 97.84%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka "Virtual Function Table Corruption Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1855

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-50.26% / 97.77%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."

Vendor-n/a Microsoft Corporation

Product-.net_framework windows_server_2003 windows_vista windows_xp windows_2003_server windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2034

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.5||HIGH

EPSS-10.71% / 93.17%

7 Day CHG~0.00%

Published-09 Jun, 2012 | 00:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-04-18||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

Vendor-n/a SUSE Red Hat, Inc.Microsoft Corporation openSUSE Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Google LLC

Product-flash_player enterprise_linux_server enterprise_linux_eus windows air enterprise_linux_server_aus linux_kernel opensuse linux_enterprise_desktop enterprise_linux_desktop enterprise_linux_workstation macos android n/a Flash Player

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2458

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-1.02% / 76.88%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CVE-2012-1881

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnRowsInserted Event Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2557

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-36.89% / 97.05%

7 Day CHG~0.00%

Published-21 Sep, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "cloneNode Use After Free Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CVE-2012-1888

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-59.76% / 98.21%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."

Vendor-n/a Microsoft Corporation

Product-visio visio_viewer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2424

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-16.13% / 94.65%

7 Day CHG~0.00%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-2548

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-36.89% / 97.05%

7 Day CHG~0.00%

Published-21 Sep, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Layout Use After Free Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CVE-2012-0418

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-6.30% / 90.76%

7 Day CHG~0.00%

Published-28 Sep, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user-assisted remote attackers to execute arbitrary code via a crafted file.

Vendor-n/a Microsoft Corporation Novell

Product-groupwise windows n/a

CVE-2012-2546

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-26.79% / 96.24%

7 Day CHG~0.00%

Published-21 Sep, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CVE-2012-1877

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Title Element Change Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_2003_server windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1878

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnBeforeDeactivate Event Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_2003_server windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1891

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.8||CRITICAL

EPSS-58.98% / 98.18%

7 Day CHG~0.00%

Published-10 Jul, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista windows_xp windows_7 data_access_components windows_server_2008 windows_data_access_components n/a data_access_components windows_data_access_components

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-908

Use of Uninitialized Resource

CVE-2011-2427

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-2.42% / 84.84%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-1874

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 97.89%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object, aka "Developer Toolbar Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2003 windows_vista internet_explorer windows_xp windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3250

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.71% / 82.06%

7 Day CHG+0.40%

Published-28 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 windows_xp quicktime windows_vista n/a

CVE-2012-2550

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-66.73% / 98.50%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc file, aka "Works Heap Vulnerability."

Vendor-n/a Microsoft Corporation

Product-works n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-2493

Matching Score-8

Assigner-Cisco Systems, Inc.

View Details

Matching Score-8

Assigner-Cisco Systems, Inc.

CVSS Score-9.3||HIGH

EPSS-1.28% / 79.32%

7 Day CHG-0.29%

Published-20 Jun, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.

Vendor-n/a Cisco Systems, Inc.Microsoft Corporation Apple Inc.Linux Kernel Organization, Inc

Product-mac_os_x linux_kernel anyconnect_secure_mobility_client windows n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-1522

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-54.93% / 97.98%

7 Day CHG~0.00%

Published-10 Jul, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Cached Object Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2008 windows_vista windows_7 internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2018-12831

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-3.45% / 87.27%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2012-0664

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.67% / 89.11%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-quicktime windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3185

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-5.09% / 89.61%

7 Day CHG~0.00%

Published-29 Aug, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Vendor-n/a Pidgin Microsoft Corporation

Product-windows pidgin n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-4928

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-2.22% / 84.19%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-windows indesign mac_os_x InDesign 13.0 and below

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-3059

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-75.42% / 98.86%

7 Day CHG~0.00%

Published-17 Jun, 2006 | 01:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.

Vendor-n/a Microsoft Corporation

Product-excel excel_viewer n/a

CVE-2011-2430

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-6.62% / 91.00%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-12837

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-3.22% / 86.80%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-12832

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-3.22% / 86.80%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-12830

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-3.38% / 87.13%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-12759

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-1.54% / 81.07%

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2012-0724

Matching Score-8

Assigner-IBM Corporation

View Details

Matching Score-8

Assigner-IBM Corporation

CVSS Score-9.3||HIGH

EPSS-1.00% / 76.70%

7 Day CHG~0.00%

Published-06 Apr, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc Oracle Corporation

Product-air android macos windows flash_player chrome solaris linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0669

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.65% / 87.63%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-quicktime windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2428

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-2.88% / 86.04%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-3248

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.97% / 86.25%

7 Day CHG~0.00%

Published-28 Oct, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 windows_xp quicktime windows_vista n/a

CVE-2011-1988

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-58.63% / 98.17%

7 Day CHG~0.00%

Published-15 Sep, 2011 | 10:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Heap Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-office excel_viewer excel open_xml_file_format_converter office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0018

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-53.67% / 97.93%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-visio_viewer n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2016

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.3||HIGH

EPSS-15.70% / 94.56%

7 Day CHG~0.00%

Published-08 Nov, 2011 | 21:00

Updated-04 Jun, 2025 | 16:15

Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .eml or .wcinv file, aka "Windows Mail Insecure Library Loading Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2008 windows_vista windows_7 n/a

CVE-2016-7020

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.86% / 87.97%

7 Day CHG~0.00%

Published-05 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2011-1278

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-50.08% / 97.75%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel WriteAV Vulnerability."

Vendor-n/a Microsoft Corporation

Product-office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2098

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-7.27% / 91.48%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2099.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0183

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-62.11% / 98.31%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "RTF Mismatch Vulnerability."

Vendor-n/a Microsoft Corporation

Product-word office_compatibility_pack office n/a

CVE-2018-4937

Matching Score-8

Assigner-Adobe Systems Incorporated

View Details

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-74.18% / 98.80%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 29.0.0.113 and earlier versions

CWE ID-CWE-787

Out-of-bounds Write

CVE-2012-0020

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.51%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.

Vendor-n/a Microsoft Corporation

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-1275

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-50.12% / 97.76%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Memory Heap Overwrite Vulnerability."

Vendor-n/a Microsoft Corporation

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1279

Matching Score-8

Assigner-Microsoft Corporation

View Details

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-43.53% / 97.43%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka "Excel Out of Bounds WriteAV Vulnerability."

Vendor-n/a Microsoft Corporation

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0159

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs