PT-2016-2583 · Microsoft · Office+5

Publicado 2016-08-09 · Atualizado 2018-10-12 · CVE-2016-3301

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows 10 1709 Microsoft Office versions prior to Office 2016 Word Viewer version not specified Skype for Business versions prior to 2016 Lync versions prior to 2013 SP1 Live Meeting 2007 Console version not specified

Description The issue exists due to insufficient input validation in the Windows font library. This allows a remote attacker to execute arbitrary code using a specially crafted embedded font. The vulnerability can be exploited to take control of the affected system, enabling the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Windows versions prior to Windows 10 1709, update to Windows 10 1709 or later. For Microsoft Office versions prior to Office 2016, update to Office 2016 or later. For Word Viewer, Skype for Business, Lync, and Live Meeting 2007 Console, no specific fix information is provided, so consider restricting the use of embedded fonts until a patch is available. As a temporary workaround, consider disabling the handling of embedded fonts in the Windows font library until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-01975

CVE-2016-3301

Produtos afetados

Live Meeting 2007 Console

Lync

Office

Skype For Business

Windows

Word Viewer

Referências · 11

• 🔥 https://exploit-db.com/exploits/40255 · Exploit
• https://bdu.fstec.ru/vul/2016-01975 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-097 · Aviso do Fabricante
• http://technet.microsoft.com/library/security/ms16-097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3301 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-3301 · Aviso do Fabricante
• http://securityfocus.com/bid/92288 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3301 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-3301 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS16-097 · Nota
• http://securitytracker.com/id/1036564 · Nota