CVE-2016-0008

MEDIUM

Microsoft Windows 7 - Information Disclosure

Title source: rule

Description

The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windows GDI32.dll ASLR Bypass Vulnerability."

References (3)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034654

[Patch, Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005

[Not Applicable] https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216

Scores

CVSS v3 4.3

EPSS 0.1217

EPSS Percentile 93.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE

CWE-200

Status draft

Affected Products (11)

microsoft/windows_7

microsoft/windows_8

microsoft/windows_8.1

microsoft/windows_rt

microsoft/windows_rt_8.1

microsoft/windows_server_2008

microsoft/windows_server_2012

microsoft/windows_vista

Timeline

Published Jan 13, 2016

Tracked Since Feb 18, 2026