CVE-2016-3232: Infoleak
Published Jun 16, 2016
·Updated
The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."
Affected Software
4 affected components
Microsoft Windows Server 2012=gold
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2012=r2
Event History
Jun 16, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3232?
CVE-2016-3232 is classified as a Medium severity vulnerability.
2
How do I fix CVE-2016-3232?
To fix CVE-2016-3232, apply the latest security updates provided by Microsoft for affected versions of Windows Server 2012.
3
What type of attack does CVE-2016-3232 involve?
CVE-2016-3232 involves a local information disclosure attack through uninitialized memory.
4
Who is affected by CVE-2016-3232?
CVE-2016-3232 affects local users of Microsoft Windows Server 2012 Gold and R2.
5
What components are impacted by CVE-2016-3232?
CVE-2016-3232 impacts the Virtual PCI (VPCI) virtual service provider in Windows Server environments.