CVE-2016-0145

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype for Business 2016; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*
cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

History

21 Nov 2024, 02:41

Type Values Removed Values Added
References () http://www.securitytracker.com/id/1035528 - () http://www.securitytracker.com/id/1035528 -
References () http://www.securitytracker.com/id/1035529 - () http://www.securitytracker.com/id/1035529 -
References () http://www.securitytracker.com/id/1035530 - () http://www.securitytracker.com/id/1035530 -
References () http://www.securitytracker.com/id/1035531 - () http://www.securitytracker.com/id/1035531 -
References () http://www.securitytracker.com/id/1035532 - Third Party Advisory () http://www.securitytracker.com/id/1035532 - Third Party Advisory
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039 -
References () https://www.exploit-db.com/exploits/39743/ - () https://www.exploit-db.com/exploits/39743/ -

Information

Published : 2016-04-12 23:59

Updated : 2024-11-21 02:41


NVD link : CVE-2016-0145

Mitre link : CVE-2016-0145

CVE.ORG link : CVE-2016-0145


JSON object : View

Products Affected

microsoft

  • windows_server_2008
  • windows_vista
  • word_viewer
  • lync
  • live_meeting
  • .net_framework
  • windows_10
  • windows_7
  • windows_8.1
  • windows_rt_8.1
  • windows_server_2012
  • skype_for_business
  • office
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer