Advisorycritical

December 2012 Microsoft Security Bulletins

Kaspersky Securelistby @SecurelistDec 11, 2012 · 22:22 UTC (Dec 11, 2012)3 min read1

Read at securelist.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-0158 CVE-2010-3333 CVE-2012-2539 CVE-2012-5676 CVE-2012-5677 CVE-2012-5678

Tags: cve-2012-0158 cve-2010-3333 cve-2012-2539 cve-2012-5676 cve-2012-5677 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2010-3333	Stack Buffer Overflow in Microsoft Office RTF Parsing Allows Remote Code Execution	—	89%	KEV	— KEV Mar 3, 2022
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2012-2539	Remote Code Execution in Microsoft Word via Crafted RTF Documents	—	53%	KEV	— KEV Mar 28, 2022

From the original article

3 min read at securelist.com

The folks at the Microsoft Security Response Center are winding down 2012 with another full release of seven Security Bulletins containing fixes for memory corruption on application, server, and system code along with a Certificate Bypass problem and set of fixes for Oracle Outside In software components.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.