PT-2016-7271 · Microsoft · Windows Vista+5

Published 2016-12-13 · Updated 2018-10-12 · CVE-2016-7257

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Office for Mac 2011 Microsoft Office 2016 for Mac

Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted web site. It affects the system and allows attackers to obtain sensitive information.

Recommendations For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk. For Microsoft Office for Mac 2011, update to a newer version to mitigate the risk. For Microsoft Office 2016 for Mac, update to a newer version to mitigate the risk.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-7257

Affected Products

Office 2016 For Mac

Office For Mac 2011

Windows

Windows 7

Windows Server 2008

Windows Vista

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2016-7257 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-146 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7257 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7257 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2016-7257 · Vendor Advisory
• http://securitytracker.com/id/1037441 · Note
• http://securitytracker.com/id/1037438 · Note
• http://securityfocus.com/bid/94755 · Note