CVE-2016-0145

EUVD-2016-0183

12.04.2016, 23:59

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype for Business 2016; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 98%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net_framework	3.0:sp2
microsoft	.net_framework	3.5
microsoft	.net_framework	3.5.1
microsoft	word_viewer	*
microsoft	windows_10	-
microsoft	windows_7	-
microsoft	windows_8.1	*
microsoft	windows_rt_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2012	-
microsoft	windows_vista	*

𝑥

= Vulnerable software versions

Windows Releases

Platform

Version

Windows 10

(x64, x86)	KB3147461
1511 (x64, x86)	KB3147458

Windows 7

Service Pack 1 (x64, x86)	KB3145739
Service Pack 1 (x64, x86)	KB3142042

Windows 8.1

(x64, x86)	KB3145739
(x64, x86)	KB3142045

Windows RT 8.1

All

KB3145739

Windows Server 2008

Service Pack 2 (x64, x86)	KB3145739
Service Pack 2 (x64, x86)	KB3142041
Service Pack 2 Server Core (x64, x86)	KB3145739

Windows Server 2008 R2

Service Pack 1 (x64)	KB3145739
Service Pack 1 (x64)	KB3142042
Service Pack 1 Server Core (x64)	KB3145739
Service Pack 1 Server Core (x64)	KB3142042

Windows Server 2012

Server Core	KB3145739
Server Core	KB3142043
Standard	KB3145739
Standard	KB3142043

Windows Server 2012 R2

Server Core	KB3145739
Server Core	KB3142045
Standard	KB3145739
Standard	KB3142045

Windows Vista

Service Pack 2	KB3145739
Service Pack 2	KB3142041
x64 Edition	KB3145739

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://www.securitytracker.com/id/1035528

http://www.securitytracker.com/id/1035529

http://www.securitytracker.com/id/1035530

http://www.securitytracker.com/id/1035531

http://www.securitytracker.com/id/1035532

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039