CVE-2016-3366

{"id": "CVE-2016-3366", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2016-09-14T10:59:40.810", "references": [{"url": "http://www.securityfocus.com/bid/92831", "source": "secure@microsoft.com"}, {"url": "http://www.securitytracker.com/id/1036785", "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107", "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/92831", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1036785", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka \"Microsoft Office Spoofing Vulnerability.\""}, {"lang": "es", "value": "Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016 y Outlook 2016 para Mac no implementa adecuadamente el RFC 2046, lo que permite a atacantes remotos eludir la detecci\u00f3n de virus o spam a trav\u00e9s de datos MIME manipulados en un archivo adjunto de un e-mail, vulnerabilidad tambi\u00e9n conocida como \"Microsoft Office Spoofing Vulnerability\"."}], "lastModified": "2024-11-21T02:49:52.280", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B32CD31-398A-4078-8B5B-B39DB9DB9A35"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9A115C1-45EB-4688-AD7C-C1854850EE9B"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7B6DF1E-0DDA-4809-B216-7CEFE0A53E2B"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "EDFE7319-3B03-42E7-B73D-907CA8A2C64A"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}