CVE-2016-3374
medium · 6.5The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3370.
6.5
CVSS
25.8%
EPSS (exploit prob.)
98th
EPSS percentile
2016-09-14
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | edge | all versions |
| microsoft | windows_10 | all versions |
| microsoft | windows_10 | 1511 |
| microsoft | windows_10 | 1607 |
| microsoft | windows_8.1 | all versions |
| microsoft | windows_rt_8.1 | all versions |
| microsoft | windows_server_2012 | all versions |
| microsoft | windows_server_2012 | r2 |
Check a specific version with /api/v1/cve/match.
References
- http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html
- http://srcincite.io/advisories/src-2016-39/
- http://www.securityfocus.com/bid/92838
- http://www.securitytracker.com/id/1036789
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115
- http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html
- http://srcincite.io/advisories/src-2016-39/
- http://www.securityfocus.com/bid/92838
- http://www.securitytracker.com/id/1036789
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-3374