CVE-2016-3209: Infoleak
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3209?
CVE-2016-3209 is rated as Critical by Microsoft, as it allows remote code execution.
How do I fix CVE-2016-3209?
To fix CVE-2016-3209, apply the security updates provided by Microsoft for affected products.
Which products are affected by CVE-2016-3209?
CVE-2016-3209 affects multiple Microsoft products including Windows Vista, various versions of Windows 7, 8.1, 10, and Office 2007 and 2010.
How does CVE-2016-3209 impact my system's security?
CVE-2016-3209 allows attackers to execute arbitrary code on a vulnerable system, which can lead to complete compromise.
Is there a workaround for CVE-2016-3209?
There are no effective workarounds for CVE-2016-3209; the recommended action is to apply the provided patches.