CVE-2012-1889

Microsoft XML Core Services Memory Corruption Vulnerability

Xml Core Services

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

13. Jun 2012

Ausgewertete Quellen

• Microsoft
  http://technet.microsoft.com/security/advisory/2719615
• Microsoft
  https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043
• Hinweis
  http://www.us-cert.gov/cas/techalerts/TA12-174A.html
• Hinweis
  http://www.us-cert.gov/cas/techalerts/TA12-192A.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1889
• CISA
  Microsoft XML Core Services Memory Corruption Vulnerability
• NVD
  CVE-2012-1889