GDI+ Remote Code Execution Vulnerability

🗓️ 11 Oct 2016 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 27 Views

A critical remote code execution vulnerability in GDI+ Windows font library allows attackers to take control of affected systems and execute unauthorized commands, potentially impacting users with administrative rights

Reporter	Title	Published	Views	Family All 35
CNVD	Microsoft Windows GDI Remote Code Execution Vulnerability	16 Oct 201600:00	–	cnvd
CVE	CVE-2016-3396	14 Oct 201601:00	–	cve
Cvelist	CVE-2016-3396	14 Oct 201601:00	–	cvelist
Microsoft KB	Security update 2016-10-11	11 Oct 201607:00	–	mskb
Microsoft KB	MS16-120: Description of the security update for Office 2010: October 11, 2016	11 Oct 201607:00	–	mskb
Microsoft KB	MS16-120: Description of the security update for Skype for Business 2016: October 11, 2016	11 Oct 201607:00	–	mskb
Microsoft KB	Microsoft Teams help & learning	11 Oct 201607:00	–	mskb
Microsoft KB	Security update 2016-10-11	11 Oct 201607:00	–	mskb
Microsoft KB	October 2016 security monthly quality rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1	11 Oct 201607:00	–	mskb
Microsoft KB	October 2016 security monthly quality rollup for Windows 8.1 and Windows Server 2012 R2	11 Oct 201607:00	–	mskb

Vulners

Node

microsoft live_meeting_2007_console

OR

microsoft lync_basic_2013_service_pack_1_(32-bit)

OR

microsoft skype_for_business_2016_basic_(64-bit)

OR

microsoft skype_for_business_2016_basic_(32-bit)

OR

microsoft skype_for_business_2016_(32-bit)

OR

microsoft skype_for_business_2016_(64-bit)

OR

microsoft lync_basic_2013_service_pack_1_(64-bit)

OR

microsoft lync_2013_service_pack_1_(64-bit)

OR

microsoft lync_2013_service_pack_1_(32-bit)

OR

microsoft lync_2010_attendee_(user_level_install)

OR

microsoft lync_2010_attendee_(admin_level_install)

OR

microsoft lync_2010_(64-bit)

OR

microsoft lync_2010_(32-bit)

OR

microsoft office_word_viewer

OR

microsoft office_2010_service_pack_2_(64-bit_editions)

OR

microsoft office_2010_service_pack_2_(32-bit_editions)

OR

microsoft office_2007_service_pack_3

OR

microsoft windows_vista_x64_edition_service_pack_2

OR

microsoft windows_vista_service_pack_2

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

13 Dec 2016 08:00Current

7.8High risk

Vulners AI Score7.8

CVSS 37.8

CVSS 29.3

EPSS0.32397

remote code execution windows font library vulnerability attack scenario web-based attack file-sharing attack security update critical severity attack vector microsoft