CVE-2016-0057

EPSS 0.76%
Veröffentlicht 09.03.2016 11:59:01
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary file, which allows local users to gain privileges via a Trojan horse file with a crafted signature, aka "Microsoft Office Security Feature Bypass Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2007 Updatesp3

Microsoft ≫ Office Version2010 Updatesp2

Microsoft ≫ Office Version2013 Updatesp1

Microsoft ≫ Office Version2016

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.76%	0.724

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securitytracker.com/id/1035207

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-029

http://www.securityfocus.com/bid/84030

https://nvd.nist.gov/vuln/detail/CVE-2016-0057

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0057

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0057

EUVD