Lucene search

MicrosoftCVE-2016-0021

HistoryMar 09, 2016 - 11:59 a.m.

CVE-2016-0021

2016-03-0911:59:00

CWE-119

microsoft

web.nvd.nist.gov

cve-2016-0021

microsoft infopath

remote code execution

office document

memory corruption

vulnerability

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.704

Percentile

98.0%

JSON

Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftinfopathMatch2007sp3

microsoftinfopathMatch2010sp2

microsoftinfopathMatch2013sp1

VendorProductVersionCPE
microsoftinfopath2007cpe:2.3:a:microsoft:infopath:2007:sp3:*:*:*:*:*:*
microsoftinfopath2010cpe:2.3:a:microsoft:infopath:2010:sp2:*:*:*:*:*:*
microsoftinfopath2013cpe:2.3:a:microsoft:infopath:2013:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	infopath	2007	cpe:2.3:a:microsoft:infopath:2007:sp3::::::
microsoft	infopath	2010	cpe:2.3:a:microsoft:infopath:2010:sp2::::::
microsoft	infopath	2013	cpe:2.3:a:microsoft:infopath:2013:sp1::::::