Executive Summary

Title Security Update for Windows Library Loading to Address Remote Code Execution (3140709)
Name MS16-025 First vendor Publication 2016-03-08
Vendor Microsoft Last vendor Modification 2016-03-08
Severity (Vendor) N/A Revision 1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Severity Rating: Important
Revision Note: V1.0 (March 8, 2016): Click here to enter text.
Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if Microsoft Windows fails to properly validate input before loading certain libraries. However, an attacker must first gain access to the local system with the ability to execute a malicious application.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS16-025

CWE : Common Weakness Enumeration

% Id Name
50 % CWE-264 Permissions, Privileges, and Access Controls
50 % CWE-20 Improper Input Validation

CPE : Common Platform Enumeration

Os 1
Os 1

Metasploit Database

id Description
2015-12-08 Office OLE Multiple DLL Side Loading Vulnerabilities

Nessus® Vulnerability Scanner

Date Description
2016-03-08 Name : The remote Windows host is affected by a remote code execution vulnerability.
File : smb_nt_ms16-025.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
Date Informations
2020-05-23 13:17:15
  • Multiple Updates
2016-03-15 21:28:21
  • Multiple Updates
2016-03-09 17:27:51
  • Multiple Updates
2016-03-09 13:25:54
  • Multiple Updates
2016-03-08 21:28:04
  • Multiple Updates
2016-03-08 21:16:38
  • First insertion