NVD

Id
19064  
Name
CVE-2016-3235  
Description
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-15  
Modified Date
2016-11-29  
Seq
2016-3235  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
105656 19064 CVE-2016-3235 http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html  View
105657 19064 CVE-2016-3235 20160615 Microsoft Visio multiple DLL side loading vulnerabilities  View
105658 19064 CVE-2016-3235 MS16-070  View
105659 19064 CVE-2016-3235 20160615 Microsoft Visio multiple DLL side loading vulnerabilities  View
105660 19064 CVE-2016-3235 1036093  View
105661 19064 CVE-2016-3235 https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2416 JVNDB-2016-003189 複数の Microsoft Visio 製品における権限昇格の脆弱性 複数の Microsoft Visio 製品は、ライブラリのローディングを誤って処理するため、権限を取得される脆弱性が存在します。 CVE-2016-3235 89741 CVE-2016-3235 19064 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003189.html 2016-06-14 2016-06-17 View