CVE-2012-0151 — Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

CISA KEV listed Added June 8, 2022 Remediate by June 22, 2022

Description

The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2012-0151

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer