![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2016-3235 |
Description: | Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability." |
Test IDs: | 1.3.6.1.4.1.25623.1.0.807842 1.3.6.1.4.1.25623.1.0.807843 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2016-3235 Bugtraq: 20160615 Microsoft Visio multiple DLL side loading vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/538685/100/0/threaded http://seclists.org/fulldisclosure/2016/Jun/32 http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html Microsoft Security Bulletin: MS16-070 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 http://www.securitytracker.com/id/1036093 |