This host is missing a critical security update according to Microsoft Bulletin MS12-060.

Successful exploitation could allow an attacker to execute arbitrary code within the context of the application. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-060

The flaw is due to an error within the TabStrip ActiveX control in MSCOMCTL.OCX file and can be exploited to execute arbitrary code.

Microsoft Visual Basic 6.0 Microsoft Commerce Server 2009 Microsoft SQL Server 2000 Service Pack 4 Microsoft SQL Server 2005 Service Pack 4 Microsoft SQL Server 2008 Service Pack 2 Microsoft SQL Server 2008 Service Pack 3 Microsoft Visual FoxPro 8.0 Service Pack 1 Microsoft Visual FoxPro 9.0 Service Pack 2 Microsoft Commerce Server 2002 Service Pack 4 Microsoft Commerce Server 2007 Service Pack 2 Microsoft Office 2003 Service Pack 3 and prior Microsoft Office 2007 Service Pack 3 and prior Microsoft Office 2010 Service Pack 1 and prior Microsoft Host Integration Server 2004 Service Pack 1 Microsoft SQL Server 2000 Analysis Services Service Pack 4 Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 4

• http://secunia.com/advisories/50247
• http://technet.microsoft.com/en-us/security/bulletin/ms12-060

---

Updated on 2015-03-25