CVE-2012-1856KEV · OVERDUE

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

High · published August 15, 2012

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1673
days past CISA
deadline
CVSS v3.1
8.8
EPSS
72%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 The TabStrip ActiveX control is like an open door that lets attackers waltz right into your system! With just a crafted document or webpage, the damage is done. 🔥 Think of the TabStrip as a mischievous guest at a dinner party, cleverly playing with the settings and making themselves at home without anyone realizing it. This vulnerability allows an attacker to corrupt system states, just like that guest rearranging everything without permission. An attacker can execute arbitrary code, potentially taking full control of the system. Imagine them accessing sensitive data, altering important files, or even demolishing critical system functions—it's absolutely devastating! Businesses could face operational chaos and data loss, and users might find their systems compromised.

Put simply

Think of the TabStrip as a mischievous guest at a dinner party, cleverly playing with the settings and making themselves at home without anyone realizing it. This vulnerability allows an attacker to corrupt system states, just like that guest rearranging everything without permission. This vulnerability exists in multiple Microsoft products and allows remote attackers to exploit the TabStrip ActiveX control, leading to arbitrary code execution through crafted documents or web pages that corrupt system state.

What to do

An attacker can execute arbitrary code, potentially taking full control of the system. Imagine them accessing sensitive data, altering important files, or even demolishing critical system functions—it's absolutely devastating! Businesses could face operational chaos and data loss, and users might find their systems compromised. To safeguard against this vulnerability, immediately update affected Microsoft products to the latest service packs or patches. Additionally, consider disabling the ActiveX control if it’s not needed, and ensure your security settings are appropriately configured to limit exposure. 🛡️ You've got this! Stay proactive, follow these steps, and you'll keep your environment secure. 🚀

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.72032 · 99.4th percentile
Published
2012-08-15T01:00Z
KEV added
2022-03-03 · due 2022-03-24
EPSS history
Timeline
  • 24 AUG 22:38Z
    EPSS moved 62% → 72%
    epss
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 15 AUG 01:00Z
    The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3…
    cvelistv5