PT-2016-2169 · Microsoft · Office Visio+1

Yorick Koster · Published 2016-06-14 · Updated 2025-04-07 · CVE-2016-3235

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Visio versions 2007 SP3 through 2016 Microsoft Visio Viewer versions 2007 SP3 through 2010

Description The issue is related to errors in library loading, which can allow a remote attacker to elevate their privileges using a specially crafted application. This can lead to the attacker gaining control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Visio versions 2007 SP3 through 2016, update to a version that includes the fix for the library loading issue. For Microsoft Visio Viewer versions 2007 SP3 through 2010, update to a version that includes the fix for the library loading issue. As a temporary workaround, consider restricting the use of library loading functionality in Microsoft Visio and Visio Viewer until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-01522

CVE-2016-3235

Affected Products

Office Visio

Visio Viewer

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/office_ole_multiple_dll_hijack.rb · Exploit
• 🔥 https://securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html · Exploit
• 🔥 https://exploit-db.com/exploits/41706 · Exploit
• https://bdu.fstec.ru/vul/2016-01522 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-3235 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3235 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 · Vendor Advisory
• https://t.me/cvenotify/108901 · Telegram Post
• http://securitytracker.com/id/1036093 · Note
• https://t.me/cvenotify/110620 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3235 · Note
• http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html · Note
• https://t.me/cvenotify/87294 · Telegram Post
• http://securityfocus.com/archive/1/538685/100/0/threaded · Note
• http://technet.microsoft.com/security/bulletin/MS16-070 · Note