CVEvulnerability
CVE-2012-1851
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted response, aka "Print Spooler Service Format String Vulnerability."
Affected configurations
• microsoft windows 7
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15531 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA12-227A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-054 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15531 oval.cisecurity.org