PT-2012-1210 · Microsoft · Biztalk Server+6

Published 2012-04-10 · Updated 2026-02-23 · CVE-2012-0158

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 Office 2003 Web Components version SP3 SQL Server versions 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2 BizTalk Server version 2002 SP1 Commerce Server versions 2002 SP4, 2007 SP2, and 2009 Gold and R2 Visual FoxPro versions 8.0 SP1 and 9.0 SP2 Visual Basic 6.0 Runtime

Description The vulnerability is related to errors in code generation management in the MSCOMCTL.OCX component of Microsoft Office, SQL Server, Commerce Server, Visual FoxPro, and Visual Basic 6.0 Runtime. It allows remote attackers to execute arbitrary code via a crafted web site, Office document, or .rtf file that triggers system state corruption. This issue was exploited in the wild in April 2012.

Recommendations For Microsoft Office versions 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1, update to a newer version to mitigate the risk. For Office 2003 Web Components version SP3, update to a newer version to mitigate the risk. For SQL Server versions 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2, update to a newer version to mitigate the risk. For BizTalk Server version 2002 SP1, update to a newer version to mitigate the risk. For Commerce Server versions 2002 SP4, 2007 SP2, and 2009 Gold and R2, update to a newer version to mitigate the risk. For Visual FoxPro versions 8.0 SP1 and 9.0 SP2, update to a newer version to mitigate the risk. For Visual Basic 6.0 Runtime, update to a newer version to mitigate the risk. As a temporary workaround, consider disabling the ListView, ListView2, TreeView, and TreeView2 ActiveX controls in MSCOMCTL.OCX to minimize the risk of exploitation.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2021-04414

CVE-2012-0158

Affected Products

Biztalk Server

Commerce Server

Office

Office 2003 Web Components

Sql Server

Visual Basic 6.0 Runtime

Visual Foxpro

References · 34

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms12_027_mscomctl_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18780 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0158 · Security Note
• https://bdu.fstec.ru/vul/2021-04414 · Security Note
• https://t.me/s_e_reborn/5571 · Telegram Post
• https://t.me/cvenotify/87283 · Telegram Post
• http://securitytracker.com/id?1026899 · Note
• https://t.me/aptreports/1086 · Telegram Post
• https://t.me/aptreports/26229 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0158 · Note
• http://us-cert.gov/cas/techalerts/TA12-101A.html · Note
• http://opensources.info/comment-on-the-curious-case-of-a-cve-2012-0158-exploit-by-chris-pierce · Note
• http://securitytracker.com/id?1026905 · Note
• https://t.me/cvenotify/104962 · Telegram Post