CVE-2012-0007
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2012-0007
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft AntiXSS Library Sanitization模块安全限制绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AntiXSS是微软提供的.net平台下的用过防止xss等脚本攻击的机制，提供了无数的编码函数用于处理用户的输入。使用白名单机制。 Microsoft Anti-Cross Site Scripting (AntiXSS) Library在实现上存在影响过滤模块的安全限制绕过漏洞。在解析转义的CSS内容时，过滤模块中的错误可被利用执行XSS攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2012-0007
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2012-0007
请登录查看更多情报信息。
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14314vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2012-0007
Same Patch Batch · n/a · 2012-01-10 · 14 CVEs total
| CVE-2011-5058 | 3S CoDeSys ‘CmbWebserver.dll’模块权限许可和访问控制漏洞 | |
| CVE-2011-5059 | Final Draft缓冲区溢出漏洞 | |
| CVE-2011-4372 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4373 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4370 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2011-4371 | Adobe Acrobat/Reader任意代码执行漏洞 | |
| CVE-2012-0001 | Microsoft Windows安全限制绕过漏洞 | |
| CVE-2012-0003 | Microsoft Windows Media Player ‘winmm.dll’ MIDI文件解析远程代码执行漏洞 | |
| CVE-2012-0004 | Microsoft DirectX DirectShow Filters远程代码执行漏洞 | |
| CVE-2012-0005 | Microsoft Windows CSRSS本地权限提升漏洞 | |
| CVE-2012-0009 | Microsoft Windows Object Packager远程代码执行漏洞 | |
| CVE-2012-0013 | Microsoft Windows ‘Windows Packager’配置任意代码执行漏洞 | |
| CVE-2011-4785 | HP LaserJet 信息泄露漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2012-0007
No comments yet