CVE-2012-0151 is a critical vulnerability affecting the Authenticode Signature Verification function across multiple Microsoft Windows versions, including XP, Vista, Windows 7, and Server 2003/2008. This flaw allows user-assisted remote attackers to execute arbitrary code by manipulating signed portable executable (PE) files with additional content. With a CVSS score of 7.8 (HIGH) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its potential for complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered substantial community discussion and media coverage, including its use in Zloader malware campaigns.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.