CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
Published Jun 12, 2012 · updated Jun 16, 2026 · microsoft xml core services
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Timeline
Detection, updates, and resolution for this record.
Jun 12, 2012 · Catalog
Detected
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Jun 8, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 22, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Required action
Apply updates per vendor instructions.
CISA due date Jun 22, 2022
Affected
- cpe microsoft/xml core services3.0
- cpe microsoft/xml core services4.0
- cpe microsoft/xml core services5.0
- cpe microsoft/xml core services6.0
- vendor Microsoft XML Core Servicesversion unspecified
Sources
- CISA KEVCVE-2012-1889
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
cisa.gov - CVE.orgCVE-2012-1889
Official CVE identifier
cve.org - FIRST EPSSCVE-2012-1889
30-day exploitation probability 83.5%
first.org - Exploit Database19186
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/msxml_get_definition_code_exec
Public module reference (good). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2012-1889
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
nvd.nist.gov