VulnerabilityAnalyzed

CVE-2012-1889

Microsoft XML Core Services Memory Corruption Vulnerability

KEVHIGH 8.8EPSS 83.6%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 22 June 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 83.64% probability · 100th percentile
CISA KEV: Listed 8 June 2022 · due 22 June 2022
Weakness: CWE-787
Affected: microsoft/xml core services
Source: secure@microsoft.com

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2012-1889

References

http://technet.microsoft.com/security/advisory/2719615Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA12-174A.htmlThird Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-192A.htmlThird Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195Broken Link
http://technet.microsoft.com/security/advisory/2719615Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA12-174A.htmlThird Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA12-192A.htmlThird Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15195Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1889US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.