Lucene search
+L

1001 matches found

Prion
Prion
•added 2016/08/09 9:59 p.m.•24 views

Security feature bypass

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute...

9.3CVSS7.8AI score0.50506EPSS
SaveExploits4References4Affected Software5
Prion
Prion
•added 2016/08/09 9:59 p.m.•29 views

Code injection

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync...

9.3CVSS7.9AI score0.44492EPSS
SaveExploits2References4Affected Software7
Cvelist
Cvelist
•added 2016/08/09 9:00 p.m.•43 views

CVE-2016-3301

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync...

7.9AI score0.44492EPSS
SaveExploits2References4
CVE
CVE
•added 2016/08/09 9:00 p.m.•157 views

CVE-2016-3304

CVE-2016-3304 is the Windows Graphics Component remote code‑execution vulnerability where the Windows font library improperly handles crafted embedded fonts, affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Office 2007 SP3/2010 SP2, Word Viewer, Skype for Business 2016,...

9.3CVSS7.8AI score0.50506EPSS
SaveExploits2References4Affected Software8
ThreatPost
ThreatPost
•added 2016/08/09 2:59 p.m.•70 views

August 2016 Microsoft Patch Tuesday Security Bulletins

A tricky vulnerability patched today in the Windows PDF Library could have put Microsoft Edge users on Windows 10 systems at risk for remote code execution attacks. Edge automatically renders PDF content when it’s set as a computer’s default browser, unlike most other browsers; the feature means...

9.3CVSS8.2AI score0.99945EPSS
SaveExploits34References9
Microsoft KB
Microsoft KB
•added 2016/08/09 7:00 a.m.•44 views

Microsoft Teams help & learning

None None...

9.3CVSS7.5AI score0.50506EPSS
SaveExploits6
Symantec
Symantec
•added 2016/08/09 12:00 a.m.•70 views

Microsoft Windows Graphics Component CVE-2016-3304 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.4AI score0.50506EPSS
SaveExploits2Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/09 12:00 a.m.•3 views

CVE-2016-3304: Improper Input Validation

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute...

9.3CVSS8AI score0.50506EPSS
SaveExploits2References2
Symantec
Symantec
•added 2016/08/09 12:00 a.m.•32 views

Microsoft Windows Graphics Component CVE-2016-3303 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.4AI score0.50506EPSS
SaveExploits2Affected Software9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/09 12:00 a.m.•4 views

CVE-2016-3303: Improper Input Validation

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute...

9.3CVSS8AI score0.50506EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2016/08/09 12:00 a.m.•0 views

PT-2016-2581

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Microsoft Office versions prior to the fixed version Word Viewer version not specified Skype for Business version not specified Live Meeting version not specified Microsoft Lync versions...

9.3CVSS0.50506EPSS
SaveExploits2References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/09 12:00 a.m.•4 views

CVE-2016-3301: Improper Input Validation

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync...

9.3CVSS8AI score0.44492EPSS
SaveExploits2References2
Microsoft KB
Microsoft KB
•added 2016/08/09 12:00 a.m.•66 views

MS16-097: Security update for Microsoft Graphics Component: August 9, 2016

Resolves vulnerabilities in in Microsoft Windows, Microsoft Office, Skype for Business, and Microsoft Lync. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves...

9.3CVSS8.1AI score0.50506EPSS
SaveExploits6
Symantec
Symantec
•added 2016/08/09 12:00 a.m.•42 views

Microsoft Windows Graphics Component CVE-2016-3301 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.3AI score0.44492EPSS
SaveExploits2Affected Software10
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•17 views

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

9.3CVSS5.9AI score0.18875EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•15 views

The vulnerability of Microsoft Lync Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in Lync Server allows a malicious individual to trigger a system failure...

5CVSS5.5AI score0.19692EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•34 views

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component in Microsoft Lync Attendee User allows for remote execution of code, provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install programs,...

9.3CVSS5.8AI score0.2022EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•28 views

The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...

9.3CVSS5.9AI score0.2022EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•16 views

The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

9.3CVSS5.9AI score0.18875EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•16 views

Vulnerability of Microsoft Lync Server software, allowing a remote attacker to compromise protected information

A vulnerability that allows access to confidential information exists in Lync Server. This vulnerability is related to the improper processing e.g., filtering of specially crafted content. If exploited successfully, a malicious individual can execute scripts in the user’s browser and gain access ...

4.3CVSS5.5AI score0.5109EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder