Microsoft Windows - Assembly Execution (MS12-005)

Author: Byoungyoung Lee
type: local
platform: windows
port: 
date_added: 2012-01-14 
date_updated: 2012-01-14 
verified: 0 
codes: CVE-2012-0013;OSVDB-78207;MS12-005 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability
# Date: 1/14/2012
# Author: Byoungyoung Lee, http://exploitshop.wordpress.com
# Version: Windows 7 32bit, fully patched until Jan 2012
# Tested on: Windows 7 32bit
# CVE : CVE-2012-0013

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/18372.docm

Open the document file, then allow the macro execution. This will
execute python script (python interpreters are required).
DEMO : http://www.youtube.com/watch?v=Odi6HiqzmL8&feature=youtu.be&hd=1