PT-2016-1377 · Microsoft+1 · Windows 7+8

Published 2016-03-08 · Updated 2018-10-12 · CVE-2016-0120

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511

Description The issue is related to the improper handling of specially crafted OpenType fonts by the Adobe Type Manager Library in Microsoft Windows, allowing remote attackers to cause a denial of service condition, such as a system hang. The vulnerability exists due to insufficient input validation. For systems except Windows 10, successful exploitation could cause a denial of service condition, while for Windows 10 systems, it could potentially cause the application to stop responding.

Recommendations For Microsoft Windows Vista SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version that includes the fix for this issue. For Microsoft Windows 7 SP1, update to a newer version that includes the fix for this issue. For Microsoft Windows 8.1, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2012 Gold and R2, update to a newer version that includes the fix for this issue. For Microsoft Windows RT 8.1, update to a newer version that includes the fix for this issue. For Microsoft Windows 10 Gold and 1511, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting the use of specially crafted OpenType fonts until a patch is available.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-00676

CVE-2016-0120

Affected Products

Type Manager Library

Windows

Windows 10

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2012

Windows Vista

References · 10

• 🔥 https://exploit-db.com/exploits/39561 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-0120 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0120 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-026 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00676 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0120 · Security Note
• http://technet.microsoft.com/security/bulletin/MS16-026 · Note
• http://technet.microsoft.com/library/security/ms16-026 · Note
• http://securitytracker.com/id/1035198 · Note
• http://securityfocus.com/bid/84071 · Note