CVE-2012-0159

EXPLOITED

Microsoft Windows and Office - Remote Code Execution via Crafted TrueType Font File

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2012-0159 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411 allow remote attackers to execute arbitrary code via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."

References (11)

Core 11
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49121
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA12-164A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027039
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49122
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15667
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/53335
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75124
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15388
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA12-129A.html

Scores

EPSS 0.2702
EPSS Percentile 97.8%

Details

VulnCheck KEV 2015-02-01
CWE
CWE-399
Status published
Products (22)
microsoft/office 2003 sp3
microsoft/office 2007 sp2 (2 CPE variants)
microsoft/office 2010 (2 CPE variants)
microsoft/silverlight 4.0.50401.0
microsoft/silverlight 4.0.50524.00
microsoft/silverlight 4.0.50826.0
microsoft/silverlight 4.0.50917.0
microsoft/silverlight 4.0.51204.0
microsoft/silverlight 4.0.60129.0
microsoft/silverlight 4.0.60310.0
... and 12 more
Published May 09, 2012
Tracked Since Feb 18, 2026