CVE:CVE-2012-1856
CNNVD:CNNVD-201208-234
多款产品中的MSCOMCTL.OCX中的Common Controls内的TabStrip ActiveX控件中存在漏洞。远程攻击者可利用该漏洞通过特制的(1)文档或(2)web页面，触发系统状态破坏，执行任意代码。又名‘MSCOMCTL.OCX RCE漏洞’。以下产品中存在漏洞：Office 2003 SP3，Office 2003 Web Components SP3， Office 2007 SP2和SP3，Office 2010 SP1，SQL Server 2000 SP4，SQL Server 2005 SP4，SQL Server 2008 SP2，SP3， R2，R2 SP1，R2 SP2，Commerce Server 2002 SP4，Commerce Server 2007 SP2，Commerce Server 2009 Gold和R2，Host Integration Server 2004 SP1，Visual FoxPro 8.0 SP1，Visual FoxPro 9.0 SP2，Visual Basic 6.0 Runtime。
solution:Upgrade microsoft commerce_server to a higher version than 2002:sp4,2007:sp2,2009,2009:r2,and avoid the version 2002:sp4,2007:sp2,2009,2009:r2; Upgrade microsoft host_integration_server to a higher version than 2004:sp1,and avoid the version 2004:sp1; Upgrade microsoft office to a higher version than 2003:sp3,2007:sp2,2007:sp3,2010:sp1,and avoid the version 2003:sp3,2007:sp2,2007:sp3,2010:sp1; Upgrade microsoft office_web_components to a higher version than 2003:sp3,and avoid the version 2003:sp3; Upgrade microsoft sql_server to a higher version than 2000:sp4,2005:sp4,2008:r2,2008:r2_sp1,2008:r2_sp2,2008:sp2,2008:sp3,and avoid the version 2000:sp4,2005:sp4,2008:r2,2008:r2_sp1,2008:r2_sp2,2008:sp2,2008:sp3; Upgrade microsoft visual_basic to a higher version than 6.0,and avoid the version 6.0; Upgrade microsoft visual_foxpro to a higher version than 8.0:sp1,9.0:sp2,and avoid the version 8.0:sp1,9.0:sp2