CVE-2012-0158 — Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2012-0158

CVE-2012-0158: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Microsoft
Product	MSCOMCTL.OCX
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0158

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0158
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog