Exploit for Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

saint · 2012-04-12

Description

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability CVE-2012-015

Affected software

Microsoft Office= 2003, 2007, 2010

Microsoft Office Web Components= 2003

All known vulnerabilities by product

Biztalk Server Commerce Server Office Office 2003 Web Components Sql Server Visual Basic 6.0 Runtime Visual Foxpro

CVSS 9.3 for CVE-2012-0158

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-07-25

Exploit Details

Modified:2012-04-12 00:00

Last Seen:2026-02-02 16:09

Reporter:SAINT Corporation

Tags

microsoft windowscommon controlsmscomctl.ocxvulnerabilityCVE-2012-0158remote attackarbitrary codertf fileupdatems12-027system state corruptionactivex controlsmicrosoft office 2007office 2010exploittestword 2007word 2010windows xpwindows 7.

Other exploits for CVE-2012-0158

Exploit for Out-of-bounds Write in Adobe Acrobat

2019-12-20 WangGuixiuGITEE

Microsoft Office 内存损坏漏洞(CVE-2015-1641)

2015-12-31 kaliccSEEBUG

MS12-027 - Office 2010 DEP/ASLR Bypass Exploit

2014-01-28 Mr.XHatZDTRuby

MS12-027 MSCOMCTL ActiveX Buffer Overflow

2012-04-25 unknownPACKETSTORMRuby

MS12-027 MSCOMCTL ActiveX Buffer Overflow

2012-04-25 metasploitZDTRuby

Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)

2012-04-25 MetasploitEXPLOITDBRuby

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

2012-04-12 SAINT CorporationSAINT

Microsoft Windows Common Controls MSCOMCTL.OCX Vulnerability

2012-04-12 SAINT CorporationSAINT

Exploit Code

MARKDOWN34 lines

## https://sploitus.com/exploit?id=SAINT:691FBFDFE24704CB1E9FB73F0186260A
Added: 04/12/2012  
CVE: CVE-2012-0158  
BID: 52911  
OSVDB: 81125  


### Background

Microsoft Windows bundles various common ActiveX controls in the Common Controls library `**MSCOMCTL.OCX**`. Several Windows applications use these controls. 

### Problem

Various ActiveX controls in `**MSCOMCTL.OCX**` in the Common Controls in Microsoft Office 2007 and Office 2010 allow remote attackers to execute arbitrary code via a crafted `**.rtf**` file that triggers system state corruption. 

### Resolution

Apply the update referenced in MS12-027. 

### References

http://technet.microsoft.com/en-us/security/bulletin/ms12-027   
http://www.net-security.org/secworld.php?id=12732   


### Limitations

This exploit has been tested on Microsoft Word 2007 SP3 and Microsoft Word 2010 SP1 running on Windows XP SP3 English (DEP OptIn) and Windows 7 SP1 (DEP OptIn). 

The user must open the exploit file in Microsoft Word on the target system. 

### Platforms

Windows