CVE-2012-1889highunder attackCWE-787

CVE-2012-1889

Published · Updated

Follow this CVE+ Monitor XML Core Services

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.

ssvc Actcvss 8.8epss 84%
from disclosure to weapon3 days
Published on NVDJun 13
1st PoC+3d
metasploitJun 12
CISA KEV+3647d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAxiom🇨🇳 MITRE ATT&CK
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

Microsoft XML Core Services has a flaw where it reads from uninitialized memory when processing certain web content. An attacker can exploit this by creating a malicious website that crashes your browser or runs harmful code on your computer.

Technical detail

CWE-787 (Out-of-bounds Write) vulnerability in MSXML 3.0–6.0 allows remote code execution or denial of service via crafted XML content served over HTTP/HTTPS. The attack requires user interaction (visiting a malicious website) and results in memory corruption leading to arbitrary code execution or application crash.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.