CVE-2012-0001
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows内核加载结构异常处理表时存在安全功能绕过漏洞。攻击者可利用该漏洞绕过SafeSEH深度防护机制以利用其它漏洞。仅使用Microsoft Visual C++ .NET 2003的软件应用可用于利用此漏洞。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2012-0001
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows安全限制绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。 Microsoft Windows内核加载结构异常处理表时存在安全功能绕过漏洞。攻击者可利用该漏洞绕过SafeSEH深度防护机制以利用其它漏洞。仅使用Microsoft Visual C++ .NET 2003的软件应用可用于利用此漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2012-0001
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2012-0001
请登录查看更多情报信息。
Vendor Advisories for CVE-2012-0001 (5)
-
-
-
-
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14758 vdb-entry signature x_refsource_OVAL
Mailing List Discussions for CVE-2012-0001 (1)
-
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00016.html vendor-advisory x_refsource_SUSE
Same Patch Batch · n/a · 2012-01-10 · 14 CVEs total
| CVE-2011-5058 | 3S CoDeSys ‘CmbWebserver.dll’模块权限许可和访问控制漏洞 | |
| CVE-2011-5059 | Final Draft缓冲区溢出漏洞 | |
| CVE-2011-4372 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4373 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4370 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4371 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2012-0003 | Microsoft Windows Media Player ‘winmm.dll’ MIDI文件解析远程代码执行漏洞 | |
| CVE-2012-0004 | Microsoft DirectX DirectShow Filters远程代码执行漏洞 | |
| CVE-2012-0005 | Microsoft Windows CSRSS本地权限提升漏洞 | |
| CVE-2012-0007 | Microsoft AntiXSS Library Sanitization模块安全限制绕过漏洞 | |
| CVE-2012-0009 | Microsoft Windows Object Packager远程代码执行漏洞 | |
| CVE-2012-0013 | Microsoft Windows ‘Windows Packager’配置任意代码执行漏洞 | |
| CVE-2011-4785 | HP LaserJet 信息泄露漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2012-0001
No comments yet