cnvd-2016-09654
Vulnerability from cnvd
Title: Microsoft Windows GDI组件信息泄露漏洞
Description:
Microsoft Windows是一款流行的操作系统。
Microsoft Windows GDI组件未能正确处理内存中的对象存在信息泄露漏洞，允许远程攻击者可利用该漏洞获取系统敏感信息。
Severity: 中
Patch Name: Microsoft Windows GDI组件信息泄露漏洞的补丁
Patch Description:
Microsoft Windows是一款流行的操作系统。
Microsoft Windows GDI组件未能正确处理内存中的对象存在信息泄露漏洞，允许远程攻击者可利用该漏洞获取系统敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
用户可参考如下厂商提供的安全补丁以修复该漏洞： https://technet.microsoft.com/library/security/MS16-120
Reference: https://technet.microsoft.com/library/security/MS16-120
Impacted products
| Name | ['Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows Server 2008 R2', 'Microsoft Windows 7 SP1', 'Microsoft Office 2007 SP3', 'Microsoft Office Word Viewer null', 'Microsoft Lync 2010', 'Microsoft .NET Framework 3.0 SP2', 'Microsoft .NET Framework 3.5', 'Microsoft .NET Framework 3.5.1', 'Microsoft Windows Vista sp2', 'Microsoft Silverlight 5', 'Microsoft Windows 8.1', 'Microsoft Office 2010 SP2', 'Microsoft .Net Framework 4.5.2', 'Microsoft Windows Server 2012 R2', 'Microsoft Windows RT 8.1', 'Microsoft Windows server 2012 Gold', 'Microsoft .NET Framework 4.6', 'Microsoft Windows 10 Gold', 'Microsoft Windows 10 1511', 'Microsoft Lync 2013 SP1', 'Microsoft Skype for Business 2016', 'Microsoft Lync 2010 Attendee', 'Microsoft Live Meeting 2007 Console', 'Microsoft Windows 10 1607'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2016-3209"
}
},
"description": "Microsoft Windows\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows GDI\u7ec4\u4ef6\u672a\u80fd\u6b63\u786e\u5904\u7406\u5185\u5b58\u4e2d\u7684\u5bf9\u8c61\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u7cfb\u7edf\u654f\u611f\u4fe1\u606f\u3002",
"discovererName": "Microsoft",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://technet.microsoft.com/library/security/MS16-120",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-09654",
"openTime": "2016-10-21",
"patchDescription": "Microsoft Windows\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows GDI\u7ec4\u4ef6\u672a\u80fd\u6b63\u786e\u5904\u7406\u5185\u5b58\u4e2d\u7684\u5bf9\u8c61\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u7cfb\u7edf\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Microsoft Windows GDI\u7ec4\u4ef6\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Microsoft Windows Server 2008 R2 SP1",
"Microsoft Windows Server 2008 R2",
"Microsoft Windows 7 SP1",
"Microsoft Office 2007 SP3",
"Microsoft Office Word Viewer null",
"Microsoft Lync 2010",
"Microsoft .NET Framework 3.0 SP2",
"Microsoft .NET Framework 3.5",
"Microsoft .NET Framework 3.5.1",
"Microsoft Windows Vista sp2",
"Microsoft Silverlight 5",
"Microsoft Windows 8.1",
"Microsoft Office 2010 SP2",
"Microsoft .Net Framework 4.5.2",
"Microsoft Windows Server 2012 R2",
"Microsoft Windows RT 8.1",
"Microsoft Windows server 2012 Gold",
"Microsoft .NET Framework 4.6",
"Microsoft Windows 10 Gold",
"Microsoft Windows 10 1511",
"Microsoft Lync 2013 SP1",
"Microsoft Skype for Business 2016",
"Microsoft Lync 2010 Attendee",
"Microsoft Live Meeting 2007 Console",
"Microsoft Windows 10 1607"
]
},
"referenceLink": "https://technet.microsoft.com/library/security/MS16-120",
"serverity": "\u4e2d",
"submitTime": "2016-10-16",
"title": "Microsoft Windows GDI\u7ec4\u4ef6\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…