CVE archive

February 2012

Browse CVE records published in February 2012, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 24 of 424 matching CVEs · Page 9 of 9.

Unknown · CVSS Not scored

CVE-2012-0154: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers keyboard layout errors, aka "Keyboard Layout Use After Free Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0150: Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and...

Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0155: Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to...

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0148: afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vist...

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "AfdPoll Elevation of Privilege Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0144: Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold a...

Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0137: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which...

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0145: Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold...

Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0149: afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate us...

afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0136: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which...

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0138: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which...

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0063: Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the...

Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.

Published Feb 21, 2020 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0064: xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which a...

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab.

Published Feb 10, 2014 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0062: Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijac...

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token.

Published Feb 14, 2014 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0057: PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary...

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Published Feb 2, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0052: Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key...

Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name.

Published Feb 14, 2014 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0055: OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode...

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.

Published Feb 19, 2020 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0020: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which...

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0034: The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platfor...

The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file.

Published Feb 5, 2013 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0019: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which...

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0015: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer,...

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0011: Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote att...

Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0010: Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows u...

Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0012: Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, w...

Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2012-0017: Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and...

Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."

Published Feb 14, 2012 · Updated Aug 6, 2024