ALEPH-2012002.md

layout	credit	timeline	alephid	cve	date	title	severity	product	mitigation	references
vuln	adico	type date add 2017-03-01 type date release 2012-07-12	ALEPH-2012002	CVE-2012-0175	2012-07-12	Microsoft Windows Shell Command Injection	critical	Microsoft Windows	Apply patches	src url Blog http://blog.watchfire.com/wfblog/2012/07/microsoft-windows-shell-command-injection-1.html src url MS12-048 http://technet.microsoft.com/en-us/security/bulletin/ms12-048

Lack of santiziation in SMB share names leads to command injection which allows for remote code execution.