Executive Summary
Summary | |
---|---|
Title | Security Update for Microsoft Office to Address Remote Code Execution (3134226) |
Informations | |||
---|---|---|---|
Name | MS16-015 | First vendor Publication | 2016-02-09 |
Vendor | Microsoft | Last vendor Modification | 2016-02-16 |
Severity (Vendor) | N/A | Revision | 2.0 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
---|---|---|---|
Cvss Base Score | 9.3 | Attack Range | Network |
Cvss Impact Score | 10 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Severity Rating: Critical |
Original Source
Url : https://technet.microsoft.com/en-us/library/security/MS16-015 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
86 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
14 % | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25) |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 6 | |
Application | 2 | |
Application | 1 | |
Application | 3 | |
Application | 1 | |
Application | 1 | |
Application | 1 | |
Application | 1 | |
Application | 2 | |
Application | 1 | |
Application | 5 | |
Application | 2 | |
Application | 1 |
Snort® IPS/IDS
Date | Description |
---|---|
2016-03-14 | Microsoft Office Word rtf file bitmap width integer overflow attempt RuleID : 37607 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word rtf file bitmap width integer overflow attempt RuleID : 37606 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Powerpoint shape objects null pointer dereference memory corruption... RuleID : 37601 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Powerpoint shape objects null pointer dereference memory corruption... RuleID : 37600 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word external document access use-after-free attempt RuleID : 37599 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word external document access use-after-free attempt RuleID : 37598 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Excel formula length heap corruption attempt RuleID : 37593 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Excel formula length heap corruption attempt RuleID : 37592 - Revision : 3 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Powerpoint shape object null pointer dereference attempt RuleID : 37580 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Powerpoint shape object null pointer dereference attempt RuleID : 37579 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word missing dpinfo structure integer overflow attempt RuleID : 37564 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word missing dpinfo structure integer overflow attempt RuleID : 37563 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word missing dpinfo structure integer overflow attempt RuleID : 37562 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word missing dpinfo structure integer overflow attempt RuleID : 37561 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word rtf file ffdefres integer underflow attempt RuleID : 37560 - Revision : 2 - Type : FILE-OFFICE |
2016-03-14 | Microsoft Office Word rtf file ffdefres integer underflow attempt RuleID : 37559 - Revision : 2 - Type : FILE-OFFICE |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2016-02-22 | Name : An application installed on the remote Mac OS X host is affected by multiple ... File : macosx_ms16-015_office.nasl - Type : ACT_GATHER_INFO |
2016-02-09 | Name : The remote Windows host is affected by multiple vulnerabilities. File : smb_nt_ms16-015.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2018-10-13 05:21:36 |
|
2016-04-27 05:04:14 |
|
2016-02-23 13:26:54 |
|
2016-02-19 21:28:49 |
|
2016-02-17 21:30:29 |
|
2016-02-17 00:29:38 |
|
2016-02-17 00:16:09 |
|
2016-02-16 21:29:35 |
|
2016-02-12 21:26:52 |
|
2016-02-12 17:29:28 |
|
2016-02-12 00:27:59 |
|
2016-02-11 08:49:12 |
|
2016-02-11 05:29:07 |
|
2016-02-10 17:29:10 |
|
2016-02-10 13:23:49 |
|
2016-02-09 21:30:20 |
|
2016-02-09 21:17:36 |
|