CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0145

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype for Business 2016; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.701

EPSS Ranking 98.6%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.3

References

Products affected by CVE-2016-0145

Microsoft » .net Framework » Version: 3.0

cpe:2.3:a:microsoft:.net_framework:3.0
Microsoft » .net Framework » Version: 3.5

cpe:2.3:a:microsoft:.net_framework:3.5
Microsoft » .net Framework » Version: 3.5.1

cpe:2.3:a:microsoft:.net_framework:3.5.1
Microsoft » Live Meeting » Version: 2007

cpe:2.3:a:microsoft:live_meeting:2007
Microsoft » Lync » Version: 2010

cpe:2.3:a:microsoft:lync:2010
Microsoft » Lync » Version: 2013

cpe:2.3:a:microsoft:lync:2013
Microsoft » Office » Version: 2007

cpe:2.3:a:microsoft:office:2007
Microsoft » Office » Version: 2010

cpe:2.3:a:microsoft:office:2010
Microsoft » Skype For Business » Version: 2016

cpe:2.3:a:microsoft:skype_for_business:2016
Microsoft » Word Viewer » Version: N/A

cpe:2.3:a:microsoft:word_viewer:-
Microsoft » Word Viewer » Version: 2003

cpe:2.3:a:microsoft:word_viewer:2003
Microsoft » Windows 10 » Version: N/A

cpe:2.3:o:microsoft:windows_10:-
Microsoft » Windows 10 » Version: 1511

cpe:2.3:o:microsoft:windows_10:1511
Microsoft » Windows 7 » Version: N/A

cpe:2.3:o:microsoft:windows_7:-
Microsoft » Windows 8.1 » Version: N/A

cpe:2.3:o:microsoft:windows_8.1:-
Microsoft » Windows 8.1 » Version: 6.3.9600.20520

cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20520
Microsoft » Windows Rt 8.1 » Version: N/A

cpe:2.3:o:microsoft:windows_rt_8.1:-
Microsoft » Windows Server 2008 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2008:-
Microsoft » Windows Server 2008 » Version: r2

cpe:2.3:o:microsoft:windows_server_2008:r2
Microsoft » Windows Server 2012 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2012:-
Microsoft » Windows Server 2012 » Version: r2

cpe:2.3:o:microsoft:windows_server_2012:r2
Microsoft » Windows Vista » Version: N/A

cpe:2.3:o:microsoft:windows_vista:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0145

Products

Pricing

Contact Us