CVE-2012-0009
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 17%
exploitation probability
17%top 3% of all CVEs
observed exploitation
nono source reports it
Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse executable file in the current working directory, as demonstrated by a directory that contains a file with an embedded packaged object, aka "Object Packager Insecure Executable Launching Vulnerability."
Affected products
n/a · n/aReferences
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-002http://secunia.com/advisories/45189https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14393http://www.securityfocus.com/bid/51297http://www.securitytracker.com/id?1026494http://www.us-cert.gov/cas/techalerts/TA12-010A.html