CVE-2012-1856
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Office
Date Added
2022-03-03
Remediation Due
2022-03-24
https://nvd.nist.gov/vuln/detail/CVE-2012-1856
Affected Software (21)
| Vendor | Product | Version |
|---|---|---|
| microsoft | commerce_server | 2002 |
| microsoft | commerce_server | 2007 |
| microsoft | commerce_server | 2009 |
| microsoft | commerce_server | 2009 |
| microsoft | host_integration_server | 2004 |
| microsoft | office | 2003 |
| microsoft | office | 2007 |
| microsoft | office | 2007 |
| microsoft | office | 2010 |
| microsoft | office_web_components | 2003 |
| microsoft | sql_server | 2000 |
| microsoft | sql_server | 2000 |
| microsoft | sql_server | 2005 |
| microsoft | sql_server | 2005 |
| microsoft | sql_server | 2008 |
| microsoft | sql_server | 2008 |
| microsoft | sql_server | 2008 |
| microsoft | sql_server | 2008 |
| microsoft | visual_basic | 6.0 |
| microsoft | visual_foxpro | 8.0 |
| microsoft | visual_foxpro | 9.0 |
References & Advisories (5)
US Government Resource
Third Party Advisory
US Government Resource
Patch
Vendor Advisory
Broken Link
Third Party Advisory
VDB Entry
Broken Link