CVE-2012-1889 is a high-severity vulnerability affecting Microsoft XML Core Services versions 3.0, 4.0, 5.0, and 6.0. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. Various configurations of Microsoft XML Core Services are impacted, including those on Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, and Windows XP, as well as specific versions of Microsoft Office.

How do I know if I'm affected?

If you're wondering whether you're affected by the vulnerability, it's important to know that it impacts Microsoft XML Core Services versions 3.0, 4.0, 5.0, and 6.0. Affected configurations include Windows 7, Windows Server 2003, Windows Server 2008, Windows Vista, and Windows XP, as well as Microsoft Office 2003 and 2007. To determine if you're at risk, check if your system is running any of these affected versions of Microsoft XML Core Services. If you find that you have an affected version installed and haven't applied the necessary security updates, your system may be vulnerable to this high-severity issue.

What should I do if I'm affected?

If you're affected by the vulnerability, it's crucial to take action to protect your system. First, check if your system is running any of the affected Microsoft XML Core Services versions. If so, apply the security update provided by Microsoft immediately. You can do this using update management software or by checking for updates using the Microsoft Update service. After applying the update, verify that it has been installed correctly.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, CVE-2012-1889 is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Microsoft XML Core Services Memory Corruption Vulnerability, was added on June 8, 2022, with a due date of June 22, 2022. This vulnerability can allow hackers to take control of your computer, and it's crucial to update your system to protect it.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-119, which involves improper restriction of operations within memory buffers. This issue can lead to remote code execution or denial of service attacks on affected systems.

For more details

CVE-2012-1889 is a significant vulnerability that affects various configurations of Microsoft XML Core Services and can lead to remote code execution or denial of service attacks. It's crucial to apply the necessary security updates and follow vendor instructions to protect your system. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Microsoft Security Advisory 2719615

• Microsoft XML Core Services Attack Activity | CISA

• Microsoft Security Bulletin MS12-043 - Critical

• Microsoft Updates for Multiple Vulnerabilities | CISA