Microsoft Graphics Remote Code Execution Vulnerability

🗓️ 08 Nov 2016 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 38 Views

Microsoft Graphics Remote Code Execution Vulnerability - Windows font library vulnerability could allow attacker to take control. Exploit possible via web or file sharing scenarios

Reporter	Title	Published	Views	Family All 31
ATTACKERKB	CVE-2016-7256	10 Nov 201600:00	–	attackerkb
BDU FSTEC	Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code	8 Dec 201600:00	–	bdu_fstec
Circl	CVE-2016-7256	23 Nov 201814:09	–	circl
CISA KEV Catalog	Microsoft Windows Open Type Font Remote Code Execution Vulnerability	25 May 202200:00	–	cisa_kev
CNVD	Microsoft Windows Open Type Font Remote Code Execution Vulnerability	9 Nov 201600:00	–	cnvd
Check Point Advisories	Microsoft Windows Open Type Font Remote Code Execution (MS16-132: CVE-2016-7256)	8 Nov 201600:00	–	checkpoint_advisories
CVE	CVE-2016-7256	10 Nov 201606:16	–	cve
Cvelist	CVE-2016-7256	10 Nov 201606:16	–	cvelist
Microsoft KB	November 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	8 Nov 201608:00	–	mskb
Microsoft KB	November 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1	8 Nov 201608:00	–	mskb

Vulners

Node

microsoft windows_vista_x64_edition_service_pack_2

OR

microsoft windows_vista_service_pack_2

OR

microsoft windows_server_2016

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server_2016_(server_core_installation)

13 Dec 2016 08:00Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

CVSS 29.3

CVSS 38.8

EPSS0.64835

SSVC

microsoft graphics remote code execution windows font library vulnerability exploit web-based attack file-sharing attack security update