CVE-2012-0175

CVE-2012-0175 is a command injection vulnerability affecting the Shell in various Microsoft Windows operating systems, including XP, Vista, Server 2003, Server 2008, and Windows 7. An attacker can exploit this by crafting a malicious file or directory name, leading to arbitrary code execution. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk with network-based exploitation, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.