CVE-2012-0158

A flaw in Microsoft's common controls (ListView, TreeView, and similar components) allows attackers to run malicious code on your computer through a rigged website, Office document, or file. This happens because the controls don't properly validate certain inputs, letting attackers corrupt system memory.

CVE-2012-0158 is an arbitrary code execution vulnerability in MSCOMCTL.OCX ActiveX controls (ListView, TreeView variants) affecting multiple Microsoft products. The vulnerability exploits improper input validation that leads to memory corruption; attack vectors include malicious web pages, Office documents, or RTF files. Successful exploitation grants remote code execution with user privileges, requiring no authentication or special preconditions beyond user interaction.