CVE-2012-0165

no score yetEPSS 25%

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."

EPSS: 25% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2012-05-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:windows_server_2008
microsoft:windows_vista

References

http://secunia.com/advisories/49121
http://www.securityfocus.com/bid/53347
http://www.securitytracker.com/id?1027038
http://www.us-cert.gov/cas/techalerts/TA12-129A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034

Check your stack JSON