CVE-2012-1889

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

83.52% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-06-08

Published

2012-06-13

Updated

2025-10-22

Proof-of-concept exploits (7)

• Janddda/PwnSTAR0★ · 2017-05-23
• PleXone2019/PwnSTAR0★ · 2020-01-02
• PleXone2019/PwnSTARR0★ · 2020-01-02
• SilverFoxx/PwnSTAR261★ · 2017-11-19
• l-iberty/cve-2012-18891★ · 2021-06-28
• marrocamp/PwnSTAR0★ · 2015-11-25
• whu-enjoy/CVE-2012-18893★ · 2016-11-17

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/msxml_get_defini…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19186

Security advisories

• http://technet.microsoft.com/security/advisory/2719615
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-043
• http://www.us-cert.gov/cas/techalerts/TA12-174A.html
• http://www.us-cert.gov/cas/techalerts/TA12-192A.html

References

• CVE Record
• NVD entry

Related

• CVE-2015-7808
• CVE-2019-11932
• CVE-2015-8660
• CVE-2016-5195