PT-2016-2172 · Microsoft · Office+2

Publicado 2016-06-14 · Atualizado 2019-05-08 · CVE-2016-3232

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2012 Gold and R2

Description The issue allows local users to obtain sensitive information from uninitialized memory locations via a crafted application. It is also described as allowing attackers to obtain sensitive information and affect the system. Additionally, there's a mention of a buffer overflow vulnerability in a virtual service provider, potentially allowing remote attackers to execute arbitrary code with a specially crafted Office document.

Recommendations For Microsoft Windows Server 2012 Gold and R2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2016-01525

CVE-2016-3232

Produtos afetados

Office

Windows Server

Windows

Referências · 8

• https://osv.dev/vulnerability/CVE-2016-3232 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS16-073 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3232 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-01525 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3232 · Nota de Segurança
• http://securitytracker.com/id/1036109 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3232 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-073 · Aviso do Fabricante