By publication date

Exploited and new serious CVEs: March 2012

63 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
48Plan	CVE-2012-0201Weaponized	Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allowibm · personal communications · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	36.3%	Mar 2, 2012
33Monitor	CVE-2011-4189Proof of concept	The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memnovell · groupwise · CWE-94 pre-auth RCE	High7.5	—	11.4%	Mar 2, 2012
44Plan	CVE-2012-0838No exploit	Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attacapache · struts · CWE-20 pre-auth RCE	Critical10.0	—	13.6%	Mar 2, 2012
48Plan	CVE-2012-0198Weaponized	Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express ibm · tivoli provisioning manager express for software distribution pre-auth RCE	Critical9.3	—	37.4%	Mar 6, 2012
29Monitor	CVE-2012-1545No exploit	Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of servmicrosoft · ie · CWE-119 Pre-auth Memory safety	Medium5.8	—	20.0%	Mar 9, 2012
24Monitor	CVE-2012-0884No exploit	The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restriopenssl · openssl · CWE-310 Pre-auth	Medium5.0	—	13.6%	Mar 12, 2012
59Plan	CVE-2012-0002Weaponized	The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Semicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	74.1%	Mar 13, 2012
29Monitor	CVE-2012-0006No exploit	The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during remicrosoft · windows server 2003 · CWE-399 Pre-auth Denial of service	Medium5.0	—	31.0%	Mar 13, 2012
44Plan	CVE-2012-0016Proof of concept	Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local usmicrosoft · expression design Pre-auth	Critical9.3	—	21.8%	Mar 13, 2012
43Plan	CVE-2012-0152Proof of concept	The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers microsoft · windows 7 · CWE-20 Pre-auth Denial of service	Medium4.3	—	86.3%	Mar 13, 2012
21Monitor	CVE-2012-0156No exploit	DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Unimicrosoft · windows 7 · CWE-20 Pre-auth Denial of service	Medium4.3	—	14.8%	Mar 13, 2012
43Plan	CVE-2012-0121No exploit	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attachp · data protector express pre-auth RCE	Critical10.0	—	10.3%	Mar 13, 2012
43Plan	CVE-2012-0122No exploit	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attachp · data protector express pre-auth RCE	Critical10.0	—	10.3%	Mar 13, 2012
43Plan	CVE-2012-0123No exploit	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attachp · data protector express pre-auth RCE	Critical10.0	—	10.2%	Mar 13, 2012
59Plan	CVE-2012-0124Weaponized	Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attachp · data protector express pre-auth RCE	Critical10.0	—	62.3%	Mar 13, 2012
50Plan	CVE-2012-1775Weaponized	Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://videolan · vlc media player · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	44.1%	Mar 19, 2012
24Monitor	CVE-2009-5114Proof of concept	Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a ..iwork · webglimpse · CWE-22 Pre-auth Path traversal	Medium5.0	—	13.2%	Mar 19, 2012
40Plan	CVE-2012-1465Weaponized	Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of servicenetmechanica · netdecision · CWE-119 Pre-auth Memory safety Denial of service	Medium4.3	—	27.1%	Mar 19, 2012
29Monitor	CVE-2012-1419No exploit	The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIcat · quick heal · CWE-264 Pre-auth	Medium4.3	—	41.0%	Mar 21, 2012
46Plan	CVE-2012-1420No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	97.1%	Mar 21, 2012
44Plan	CVE-2012-1421No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	89.1%	Mar 21, 2012
45Plan	CVE-2012-1422No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.0cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	94.0%	Mar 21, 2012
44Plan	CVE-2012-1423No exploit	The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, emsisoft · anti-malware · CWE-264 Pre-auth	Medium4.3	—	89.7%	Mar 21, 2012
43Plan	CVE-2012-1424No exploit	The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.antiy · avl sdk · CWE-264 Pre-auth	Medium4.3	—	87.2%	Mar 21, 2012
45Plan	CVE-2012-1425No exploit	The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1antiy · avl sdk · CWE-264 Pre-auth	Medium4.3	—	93.1%	Mar 21, 2012
44Plan	CVE-2012-1426No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565,cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	89.9%	Mar 21, 2012
43Plan	CVE-2012-1427No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	87.6%	Mar 21, 2012
43Plan	CVE-2012-1428No exploit	The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	87.6%	Mar 21, 2012
45Plan	CVE-2012-1429No exploit	The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.comodo · comodo antivirus · CWE-264 Pre-auth	Medium4.3	—	92.4%	Mar 21, 2012
46Plan	CVE-2012-1430No exploit	The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Ebitdefender · bitdefender · CWE-264 Pre-auth	Medium4.3	—	95.9%	Mar 21, 2012
46Plan	CVE-2012-1431No exploit	The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secbitdefender · bitdefender · CWE-264 Pre-auth	Medium4.3	—	95.9%	Mar 21, 2012
45Plan	CVE-2012-1432No exploit	The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, andemsisoft · anti-malware · CWE-264 Pre-auth	Medium4.3	—	93.4%	Mar 21, 2012
45Plan	CVE-2012-1433No exploit	The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	93.5%	Mar 21, 2012
35Monitor	CVE-2012-1434No exploit	The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Commandahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	60.0%	Mar 21, 2012
45Plan	CVE-2012-1435No exploit	The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	93.5%	Mar 21, 2012
45Plan	CVE-2012-1436No exploit	The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	93.5%	Mar 21, 2012
21Monitor	CVE-2012-1438No exploit	The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection vcomodo · comodo antivirus · CWE-264 Pre-auth	Medium4.3	—	13.9%	Mar 21, 2012
44Plan	CVE-2012-1439No exploit	The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remotfortinet · fortinet antivirus · CWE-264 Pre-auth	Medium4.3	—	89.9%	Mar 21, 2012
40Plan	CVE-2012-1440No exploit	The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda ca · etrust vet antivirus · CWE-264 Pre-auth	Medium4.3	—	77.7%	Mar 21, 2012
38Monitor	CVE-2012-1441No exploit	The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a modprevx · prevx · CWE-264 Pre-auth	Medium4.3	—	70.2%	Mar 21, 2012
47Plan	CVE-2012-1442No exploit	The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwascat · quick heal · CWE-264 Pre-auth	Medium4.3	—	98.9%	Mar 21, 2012
47Plan	CVE-2012-1443No exploit	The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 Pre-auth	Medium4.3	—	99.6%	Mar 21, 2012
36Monitor	CVE-2012-1444No exploit	The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypafortinet · fortinet antivirus · CWE-264 Pre-auth	Medium4.3	—	63.2%	Mar 21, 2012
44Plan	CVE-2012-1445No exploit	The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remotfortinet · fortinet antivirus · CWE-264 Pre-auth	Medium4.3	—	89.9%	Mar 21, 2012
47Plan	CVE-2012-1446No exploit	The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symanca · etrust vet antivirus · CWE-264 Pre-auth	Medium4.3	—	99.7%	Mar 21, 2012
37Monitor	CVE-2012-1447No exploit	The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attackerfortinet · fortinet antivirus · CWE-264 Pre-auth	Medium4.3	—	67.6%	Mar 21, 2012
44Plan	CVE-2012-1448No exploit	The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scancat · quick heal · CWE-264 Pre-auth	Medium4.3	—	88.8%	Mar 21, 2012
35Monitor	CVE-2012-1449No exploit	The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB feset · nod32 antivirus · CWE-264 Pre-auth	Medium4.3	—	61.1%	Mar 21, 2012
39Monitor	CVE-2012-1450No exploit	The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 emsisoft · anti-malware · CWE-264 Pre-auth	Medium4.3	—	73.5%	Mar 21, 2012
37Monitor	CVE-2012-1451No exploit	The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to emsisoft · anti-malware · CWE-264 Pre-auth	Medium4.3	—	67.3%	Mar 21, 2012
44Plan	CVE-2012-1452No exploit	The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat Quickcat · quick heal · CWE-264 Pre-auth	Medium4.3	—	88.8%	Mar 21, 2012
46Plan	CVE-2012-1453No exploit	The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Treca · etrust vet antivirus · CWE-264 Pre-auth	Medium4.3	—	97.7%	Mar 21, 2012
43Plan	CVE-2012-1454No exploit	The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinmcafee · gateway · CWE-264 Pre-auth	Medium4.3	—	88.2%	Mar 21, 2012
35Monitor	CVE-2012-1455No exploit	The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB feset · nod32 antivirus · CWE-264 Pre-auth	Medium4.3	—	61.1%	Mar 21, 2012
47Plan	CVE-2012-1456No exploit	The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.avg · avg anti-virus · CWE-264 Pre-auth	Medium4.3	—	99.9%	Mar 21, 2012
46Plan	CVE-2012-1457No exploit	The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 Pre-auth	Medium4.3	—	98.3%	Mar 21, 2012
39Monitor	CVE-2012-1458No exploit	The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafteclamav · clamav · CWE-264 Pre-auth	Medium4.3	—	73.6%	Mar 21, 2012
47Plan	CVE-2012-1459No exploit	The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	99.8%	Mar 21, 2012
45Plan	CVE-2012-1460No exploit	The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Protantiy · avl sdk · CWE-264 Pre-auth	Medium4.3	—	94.4%	Mar 21, 2012
45Plan	CVE-2012-1461No exploit	The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Antanti-virus · vba32 · CWE-264 Pre-auth	Medium4.3	—	91.7%	Mar 21, 2012
46Plan	CVE-2012-1462No exploit	The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoftahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	97.8%	Mar 21, 2012
45Plan	CVE-2012-1463No exploit	The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5ahnlab · v3 internet security · CWE-264 Pre-auth	Medium4.3	—	94.2%	Mar 21, 2012
47Plan	CVE-2012-0127No exploit	Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.hp · performance manager pre-auth RCE	Critical10.0	—	23.6%	Mar 31, 2012

CVE-2012-0201
48Plan
Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow
CriticalCVSS 9.3WeaponizedEPSS 36%
- pre-auth RCE
- Memory safety
ibm · personal communicationsMar 2, 2012
CVE-2011-4189
33Monitor
The client in Novell GroupWise 8.0x through 8.02HP3 allows remote attackers to execute arbitrary code or cause a denial of service (heap mem
HighCVSS 7.5Proof of conceptEPSS 11%
- pre-auth RCE
novell · groupwiseMar 2, 2012
CVE-2012-0838
44Plan
Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attac
CriticalCVSS 10.0No exploitEPSS 13%
- pre-auth RCE
apache · strutsMar 2, 2012
CVE-2012-0198
48Plan
Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express
CriticalCVSS 9.3WeaponizedEPSS 37%
- pre-auth RCE
ibm · tivoli provisioning manager express for software distributionMar 6, 2012
CVE-2012-1545
29Monitor
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of serv
MediumCVSS 5.8No exploitEPSS 20%
- Pre-auth
- Memory safety
microsoft · ieMar 9, 2012
CVE-2012-0884
24Monitor
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restri
MediumCVSS 5.0No exploitEPSS 13%
- Pre-auth
openssl · opensslMar 12, 2012
CVE-2012-0002
59Plan
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se
CriticalCVSS 9.3WeaponizedEPSS 74%
- pre-auth RCE
microsoft · windows 7Mar 13, 2012
CVE-2012-0006
29Monitor
The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during re
MediumCVSS 5.0No exploitEPSS 31%
- Pre-auth
- Denial of service
microsoft · windows server 2003Mar 13, 2012
CVE-2012-0016
44Plan
Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local us
CriticalCVSS 9.3Proof of conceptEPSS 21%
- Pre-auth
microsoft · expression designMar 13, 2012
CVE-2012-0152
43Plan
The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers
MediumCVSS 4.3Proof of conceptEPSS 86%
- Pre-auth
- Denial of service
microsoft · windows 7Mar 13, 2012
CVE-2012-0156
21Monitor
DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Uni
MediumCVSS 4.3No exploitEPSS 14%
- Pre-auth
- Denial of service
microsoft · windows 7Mar 13, 2012
CVE-2012-0121
43Plan
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attac
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · data protector expressMar 13, 2012
CVE-2012-0122
43Plan
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attac
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · data protector expressMar 13, 2012
CVE-2012-0123
43Plan
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attac
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · data protector expressMar 13, 2012
CVE-2012-0124
59Plan
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attac
CriticalCVSS 10.0WeaponizedEPSS 62%
- pre-auth RCE
hp · data protector expressMar 13, 2012
CVE-2012-1775
50Plan
Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS://
CriticalCVSS 9.3WeaponizedEPSS 44%
- pre-auth RCE
- Memory safety
videolan · vlc media playerMar 19, 2012
CVE-2009-5114
24Monitor
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a ..
MediumCVSS 5.0Proof of conceptEPSS 13%
- Pre-auth
- Path traversal
iwork · webglimpseMar 19, 2012
CVE-2012-1465
40Plan
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service
MediumCVSS 4.3WeaponizedEPSS 27%
- Pre-auth
- Memory safety
- Denial of service
netmechanica · netdecisionMar 19, 2012
CVE-2012-1419
29Monitor
The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSI
MediumCVSS 4.3No exploitEPSS 41%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1420
46Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.
MediumCVSS 4.3No exploitEPSS 97%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1421
44Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.
MediumCVSS 4.3No exploitEPSS 89%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1422
45Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.0
MediumCVSS 4.3No exploitEPSS 94%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1423
44Plan
The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0,
MediumCVSS 4.3No exploitEPSS 89%
- Pre-auth
emsisoft · anti-malwareMar 21, 2012
CVE-2012-1424
43Plan
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.
MediumCVSS 4.3No exploitEPSS 87%
- Pre-auth
antiy · avl sdkMar 21, 2012
CVE-2012-1425
45Plan
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1
MediumCVSS 4.3No exploitEPSS 93%
- Pre-auth
antiy · avl sdkMar 21, 2012
CVE-2012-1426
44Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, F-Prot Antivirus 4.6.2.117, K7 AntiVirus 9.77.3565,
MediumCVSS 4.3No exploitEPSS 89%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1427
43Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers
MediumCVSS 4.3No exploitEPSS 87%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1428
43Plan
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers
MediumCVSS 4.3No exploitEPSS 87%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1429
45Plan
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.
MediumCVSS 4.3No exploitEPSS 92%
- Pre-auth
comodo · comodo antivirusMar 21, 2012
CVE-2012-1430
46Plan
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning E
MediumCVSS 4.3No exploitEPSS 95%
- Pre-auth
bitdefender · bitdefenderMar 21, 2012
CVE-2012-1431
46Plan
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Sec
MediumCVSS 4.3No exploitEPSS 95%
- Pre-auth
bitdefender · bitdefenderMar 21, 2012
CVE-2012-1432
45Plan
The Microsoft EXE file parser in Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and
MediumCVSS 4.3No exploitEPSS 93%
- Pre-auth
emsisoft · anti-malwareMar 21, 2012
CVE-2012-1433
45Plan
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Util
MediumCVSS 4.3No exploitEPSS 93%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1434
35Monitor
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command
MediumCVSS 4.3No exploitEPSS 60%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1435
45Plan
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Util
MediumCVSS 4.3No exploitEPSS 93%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1436
45Plan
The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Ikarus Virus Util
MediumCVSS 4.3No exploitEPSS 93%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1438
21Monitor
The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection v
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
comodo · comodo antivirusMar 21, 2012
CVE-2012-1439
44Plan
The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remot
MediumCVSS 4.3No exploitEPSS 89%
- Pre-auth
fortinet · fortinet antivirusMar 21, 2012
CVE-2012-1440
40Plan
The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda
MediumCVSS 4.3No exploitEPSS 77%
- Pre-auth
ca · etrust vet antivirusMar 21, 2012
CVE-2012-1441
38Monitor
The Microsoft EXE file parser in eSafe 7.0.17.0 and Prevx 3.0 allows remote attackers to bypass malware detection via an EXE file with a mod
MediumCVSS 4.3No exploitEPSS 70%
- Pre-auth
prevx · prevxMar 21, 2012
CVE-2012-1442
47Plan
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwas
MediumCVSS 4.3No exploitEPSS 98%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1443
47Plan
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1444
36Monitor
The ELF file parser in eSafe 7.0.17.0, Prevx 3.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypa
MediumCVSS 4.3No exploitEPSS 63%
- Pre-auth
fortinet · fortinet antivirusMar 21, 2012
CVE-2012-1445
44Plan
The ELF file parser in eSafe 7.0.17.0, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remot
MediumCVSS 4.3No exploitEPSS 89%
- Pre-auth
fortinet · fortinet antivirusMar 21, 2012
CVE-2012-1446
47Plan
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Syman
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
ca · etrust vet antivirusMar 21, 2012
CVE-2012-1447
37Monitor
The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antivirus 10.0.2.7 allows remote attacker
MediumCVSS 4.3No exploitEPSS 67%
- Pre-auth
fortinet · fortinet antivirusMar 21, 2012
CVE-2012-1448
44Plan
The CAB file parser in Quick Heal (aka Cat QuickHeal) 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scan
MediumCVSS 4.3No exploitEPSS 88%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1449
35Monitor
The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB f
MediumCVSS 4.3No exploitEPSS 61%
- Pre-auth
eset · nod32 antivirusMar 21, 2012
CVE-2012-1450
39Monitor
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0
MediumCVSS 4.3No exploitEPSS 73%
- Pre-auth
emsisoft · anti-malwareMar 21, 2012
CVE-2012-1451
37Monitor
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1 and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to
MediumCVSS 4.3No exploitEPSS 67%
- Pre-auth
emsisoft · anti-malwareMar 21, 2012
CVE-2012-1452
44Plan
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat Quick
MediumCVSS 4.3No exploitEPSS 88%
- Pre-auth
cat · quick healMar 21, 2012
CVE-2012-1453
46Plan
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Tre
MediumCVSS 4.3No exploitEPSS 97%
- Pre-auth
ca · etrust vet antivirusMar 21, 2012
CVE-2012-1454
43Plan
The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortin
MediumCVSS 4.3No exploitEPSS 88%
- Pre-auth
mcafee · gatewayMar 21, 2012
CVE-2012-1455
35Monitor
The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB f
MediumCVSS 4.3No exploitEPSS 61%
- Pre-auth
eset · nod32 antivirusMar 21, 2012
CVE-2012-1456
47Plan
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
avg · avg anti-virusMar 21, 2012
CVE-2012-1457
46Plan
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
MediumCVSS 4.3No exploitEPSS 98%
- Pre-auth
anti-virus · vba32Mar 21, 2012
CVE-2012-1458
39Monitor
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafte
MediumCVSS 4.3No exploitEPSS 73%
- Pre-auth
clamav · clamavMar 21, 2012
CVE-2012-1459
47Plan
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
MediumCVSS 4.3No exploitEPSS 99%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1460
45Plan
The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-Prot
MediumCVSS 4.3No exploitEPSS 94%
- Pre-auth
antiy · avl sdkMar 21, 2012
CVE-2012-1461
45Plan
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Ant
MediumCVSS 4.3No exploitEPSS 91%
- Pre-auth
anti-virus · vba32Mar 21, 2012
CVE-2012-1462
46Plan
The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft
MediumCVSS 4.3No exploitEPSS 97%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-1463
45Plan
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5
MediumCVSS 4.3No exploitEPSS 94%
- Pre-auth
ahnlab · v3 internet securityMar 21, 2012
CVE-2012-0127
47Plan
Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.
CriticalCVSS 10.0No exploitEPSS 23%
- pre-auth RCE
hp · performance managerMar 31, 2012