CVE-2016-3235

Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."

CVSS v3 7.8 HIGH
CVSS v2.0 9.3 HIGH

7.8^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2016/Jun/32
http://www.securityfocus.com/archive/1/538685/100/0/threaded
http://www.securitytracker.com/id/1036093
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070
https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:visio:2007:sp3::::::
	cpe:2.3:a:microsoft:visio:2010:sp2::::::
	cpe:2.3:a:microsoft:visio:2013:sp1::::::
	cpe:2.3:a:microsoft:visio:2016:::::::*
	cpe:2.3:a:microsoft:visio_viewer:2007:sp3::::::
	cpe:2.3:a:microsoft:visio_viewer:2010:::::::*

History

No history.

Information

Published : 2016-06-16 01:59

Updated : 2023-12-10 11:46

NVD link : CVE-2016-3235

Mitre link : CVE-2016-3235

CVE.ORG link : CVE-2016-3235

JSON object : View

Products Affected

microsoft

visio
visio_viewer

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2016-3235", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2016-06-16T01:59:36.983", "references": [{"url": "http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html", "source": "secure@microsoft.com"}, {"url": "http://seclists.org/fulldisclosure/2016/Jun/32", "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/archive/1/538685/100/0/threaded", "source": "secure@microsoft.com"}, {"url": "http://www.securitytracker.com/id/1036093", "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070", "source": "secure@microsoft.com"}, {"url": "https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html", "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\""}, {"lang": "es", "value": "Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3 y Visio Viewer 2010 no maneja adecuadamente la carga de librer\u00edas, lo que permite a usuarios locales obtener privilegios a trav\u00e9s de una aplicaci\u00f3n manipulada, tambi\u00e9n conocida como \"Microsoft Office OLE DLL Side Loading Vulnerability.\""}], "lastModified": "2018-10-12T22:12:04.727", "cisaActionDue": "2022-05-03", "cisaExploitAdd": "2021-11-03", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "387D78BD-2368-4525-BFC2-52149585E1F0"}, {"criteria": "cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED0408B6-4FB5-45E9-AD27-301FC383152D"}, {"criteria": "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"}, {"criteria": "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89229922-0836-4CC2-AED2-107C3142D0EA"}, {"criteria": "cpe:2.3:a:microsoft:visio_viewer:2007:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E480F86-60A0-4662-9262-CBC94C62A8F0"}, {"criteria": "cpe:2.3:a:microsoft:visio_viewer:2010:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B063DF85-AF5F-484B-AB6F-7B51FC42189F"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Microsoft Office OLE DLL Side Loading Vulnerability"}