Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Bugtraq ID:	54928
Class:	Design Error
CVE:	CVE-2012-1851
Remote:	Yes
Local:	No
Published:	Aug 14 2012 12:00AM
Updated:	Aug 12 2013 01:06PM
Credit:	Yamata Li of Palo Alto Networks
Vulnerable:	Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP 0
Not Vulnerable:

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler service.

Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the complete compromise of affected computers.

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Solution:
Microsoft has released fixes and an advisory. Please see the references for details.

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )