# CVEs published 2012-06-12 24 CVEs were published on June 12, 2012: 0 critical, 2 high. Days are UTC. - [CVE-2012-0173](https://cve.now/CVE-2012-0173.md): The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Se (no CVSS) - [CVE-2012-0217](https://cve.now/CVE-2012-0217.md): The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Orac (no CVSS) - [CVE-2012-1523](https://cve.now/CVE-2012-1523.md): Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2012-1849](https://cve.now/CVE-2012-1849.md): Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Tr (no CVSS) - [CVE-2012-1855](https://cve.now/CVE-2012-1855.md): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execut (no CVSS) - [CVE-2012-1857](https://cve.now/CVE-2012-1857.md): Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject (no CVSS) - [CVE-2012-1858](https://cve.now/CVE-2012-1858.md): The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Atten (no CVSS) - [CVE-2012-1864](https://cve.now/CVE-2012-1864.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2012-1865](https://cve.now/CVE-2012-1865.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2012-1866](https://cve.now/CVE-2012-1866.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2012-1867](https://cve.now/CVE-2012-1867.md): Integer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W (CVSS 8.4) - [CVE-2012-1868](https://cve.now/CVE-2012-1868.md): Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users (no CVSS) - [CVE-2012-1872](https://cve.now/CVE-2012-1872.md): Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to inject arbitrary web script o (CVSS 6.1) - [CVE-2012-1873](https://cve.now/CVE-2012-1873.md): Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensiti (no CVSS) - [CVE-2012-1874](https://cve.now/CVE-2012-1874.md): Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbit (no CVSS) - [CVE-2012-1875](https://cve.now/CVE-2012-1875.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS) - [CVE-2012-1876](https://cve.now/CVE-2012-1876.md): Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers (no CVSS) - [CVE-2012-1877](https://cve.now/CVE-2012-1877.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2012-1878](https://cve.now/CVE-2012-1878.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2012-1879](https://cve.now/CVE-2012-1879.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (CVSS 8.1) - [CVE-2012-1880](https://cve.now/CVE-2012-1880.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2012-1881](https://cve.now/CVE-2012-1881.md): Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a (no CVSS) - [CVE-2012-1882](https://cve.now/CVE-2012-1882.md): Microsoft Internet Explorer 6 through 9 does not block cross-domain scrolling events, which allows remote attackers to read content from a d (no CVSS) - [CVE-2012-0677](https://cve.now/CVE-2012-0677.md): Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (app (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-06-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.