CVE-2012-1889 | BDVDB-2026-50516 Detail
MicrosoftXML Core Services
Description#
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- http://www.us-cert.gov/cas/techalerts/TA12-192A.html
- http://technet.microsoft.com/security/advisory/2719615
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043
- http://www.us-cert.gov/cas/techalerts/TA12-174A.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1889
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.