CVE-2012-0151

KEV

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

Vendor / Project: Microsoft
Product: Windows
Date added: Jun 8, 2022
Due date: Jun 22, 2022
Known ransomware use: Unknown
CWEs: CWE-20

Description

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0151