deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-8231
Published: 2016-01-11
Description: Huawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote attackers with established sessions to cause a denial of service (device restart) via unspecified packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461213.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-461213.htm
CVE: CVE-2015-8331
Published: 2016-01-11
Description: The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463067.htm
CVE: CVE-2015-8333
Published: 2016-01-11
Description: The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 allows remote authenticated users to change the IP address of the media server via crafted packets.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463070.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463070.htm
CVE: CVE-2015-8335
Published: 2016-01-11
Description: Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows remote authenticated users to obtain sensitive information by triggering log generation and then reading the log.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-463084.htm
CVE: CVE-2015-1779
Published: 2016-01-12
Description: The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html; http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html
CVE: CVE-2015-4671
Published: 2016-01-12
Description: Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web script or HTML via the zone_id parameter to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/135163/OpenCart-2.1.0.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jan/17; https://github.com/opencart/opencart/commit/303fa88fe664ded4bf8753b997abd916f0a3c03f
CVE: CVE-2015-4703
Published: 2016-01-12
Description: Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/132460/WordPress-WP-Instance-Rename-1.0-File-Download.html; http://www.openwall.com/lists/oss-security/2015/06/23/5; http://www.securityfocus.com/bid/75394
CVE: CVE-2015-5471
Published: 2016-01-12
Description: Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://michaelwalsh.org/blog/2015/07/wp-swimteam-v1-45-beta-3-now-available/; http://packetstormsecurity.com/files/132653/WordPress-WP-SwimTeam-1.44.10777-Arbitrary-File-Download.html; http://www.securityfocus.com/bid/75600
CVE: CVE-2015-7242
Published: 2016-01-12
Description: Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ds-develop.de/advisories/advisory-2016-01-07-1-avm.txt; http://packetstormsecurity.com/files/135168/AVM-FRITZ-OS-HTML-Injection.html; http://www.securityfocus.com/archive/1/537249/100/0/threaded
CVE: CVE-2015-7548
Published: 2016-01-12
Description: OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2016-0018.html; http://www.securityfocus.com/bid/80176; https://security.openstack.org/ossa/OSSA-2016-001.html
CVE: CVE-2015-8088
Published: 2016-01-12
Description: Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/hw-460347; http://www.securityfocus.com/bid/77560; http://www.huawei.com/en/psirt/security-advisories/hw-460347
CVE: CVE-2015-8098
Published: 2016-01-12
Description: F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile, aka an "Out-of-bounds memory vulnerability."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034609; https://support.f5.com/kb/en-us/solutions/public/k/43/sol43552605.html; http://www.securitytracker.com/id/1034609
CVE: CVE-2015-8306
Published: 2016-01-12
Description: Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) or execute arbitrary code via an unspecified parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-03-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-03-smartphone-en
CVE: CVE-2015-8337
Published: 2016-01-12
Description: The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10 before GRA-UL10C00B220 and Mate7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 allows remote attackers to cause a denial of service (invalid memory access and reboot) via unspecified vectors related to "input null pointer as parameter."
CVSS Score: 5.5 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/hw-465304; http://www.securityfocus.com/bid/80357; http://www.huawei.com/en/psirt/security-advisories/hw-465304
CVE: CVE-2015-8400
Published: 2016-01-12
Description: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
CVSS Score: 7.4 (HIGH)
CWE: CWE-254
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175117.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175224.html; http://www.openwall.com/lists/oss-security/2015/12/02/6
CVE: CVE-2015-8603
Published: 2016-01-12
Description: Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an "edit" admin action to serendipity_admin.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://blog.s9y.org/archives/266-Serendipity-2.0.3-released.html; http://packetstormsecurity.com/files/135164/Serendipity-2.0.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jan/18
CVE: CVE-2015-8659
Published: 2016-01-12
Description: The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html
CVE: CVE-2015-7393
Published: 2016-01-12
Description: dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.0 through 11.3.0, BIG-IP GTM 11.2.0 through 11.6.0, BIG-IP PSM 11.2.0 through 11.4.1, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ Security 4.0.0 through 4.5.0, BIG-IQ ADC 4.5.0, BIG-IQ Centralized Management 4.6.0, and BIG-IQ Cloud and Orchestration 1.0.0 allows local users with advanced shell (bash) access to gain privileges via unspecified vectors.
CVSS Score: 7.4 (HIGH)
References: http://securitytracker.com/id/1034632; http://www.securitytracker.com/id/1034633; https://support.f5.com/kb/en-us/solutions/public/k/75/sol75136237.html
CVE: CVE-2015-7759
Published: 2016-01-12
Description: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service (Traffic Management Microkernel (TMM) restart) via crafted ICMP packets, related to Path MTU (PMTU) discovery.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: http://www.securitytracker.com/id/1034627; https://support.f5.com/kb/en-us/solutions/public/k/22/sol22843911.html; http://www.securitytracker.com/id/1034627
CVE: CVE-2015-8396
Published: 2016-01-12
Description: Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-189
References: http://census-labs.com/news/2016/01/11/gdcm-buffer-overflow-imageregionreaderreadintobuffer/; http://packetstormsecurity.com/files/135205/GDCM-2.6.0-2.6.1-Integer-Overflow.html; http://seclists.org/fulldisclosure/2016/Jan/29
CVE: CVE-2015-8397
Published: 2016-01-12
Description: The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (application crash) via an embedded JPEG-LS image with dimensions larger than the selected region in a (1) two-dimensional or (2) three-dimensional DICOM image file, which triggers an out-of-bounds read.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: http://census-labs.com/news/2016/01/11/gdcm-out-bounds-read-jpeglscodec-decodeextent/; http://packetstormsecurity.com/files/135206/GDCM-2.6.0-2.6.1-Out-Of-Bounds-Read.html; http://seclists.org/fulldisclosure/2016/Jan/33
CVE: CVE-2015-8611
Published: 2016-01-12
Description: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.securitytracker.com/id/1034629; https://support.f5.com/kb/en-us/solutions/public/k/05/sol05272632.html; http://www.securitytracker.com/id/1034629
CVE: CVE-2015-8672
Published: 2016-01-12
Description: The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-19
References: http://www.huawei.com/en/psirt/security-advisories/hw-462952; http://www.huawei.com/en/psirt/security-advisories/hw-462952
CVE: CVE-2015-8673
Published: 2016-01-12
Description: Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-255
References: http://www.huawei.com/en/psirt/security-advisories/hw-462952; http://www.huawei.com/en/psirt/security-advisories/hw-462952
CVE: CVE-2015-8769
Published: 2016-01-12
Description: SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/79679; http://www.securitytracker.com/id/1034658; https://developer.joomla.org/security-centre/[PII_REDACTED]7-core-sql-injection.html
CVE: CVE-2016-1231
Published: 2016-01-12
Description: Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) in an unspecified path.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: http://blog.prosody.im/prosody-0-9-9-security-release/; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175829.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175868.html
CVE: CVE-2016-1232
Published: 2016-01-12
Description: The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack.
CVSS Score: 7.5 (HIGH)
References: http://blog.prosody.im/prosody-0-9-9-security-release/; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175829.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175868.html
CVE: CVE-2016-1715
Published: 2016-01-12
Description: The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service (memory corruption and system crash) or gain privileges via a 768 syscall, which triggers a zero to be written to an arbitrary kernel memory location.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-189
References: http://www.zerodayinitiative.com/advisories/ZDI-16-007; https://kc.mcafee.com/corporate/index?page=content&id=SB10145; http://www.zerodayinitiative.com/advisories/ZDI-16-007
CVE: CVE-2015-6117
Published: 2016-01-13
Description: Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2016-0011.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1034653; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004; http://www.securitytracker.com/id/1034653
CVE: CVE-2016-0002
Published: 2016-01-13
Description: The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034648; http://www.securitytracker.com/id/1034650; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001
CVE: CVE-2016-0003
Published: 2016-01-13
Description: Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability."
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034649; http://www.zerodayinitiative.com/advisories/ZDI-16-019; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-002
CVE: CVE-2016-0005
Published: 2016-01-13
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1034648; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-001; http://www.securitytracker.com/id/1034648
CVE: CVE-2016-0006
Published: 2016-01-13
Description: The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a crafted application, aka "Windows Mount Point Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0007.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/79882; http://www.securitytracker.com/id/1034645; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-008
CVE: CVE-2016-0007
Published: 2016-01-13
Description: The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a crafted application, aka "Windows Mount Point Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0006.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/79898; http://www.securitytracker.com/id/1034645; https://code.google.com/p/google-security-research/issues/detail?id=589
CVE: CVE-2016-0008
Published: 2016-01-13
Description: The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Windows GDI32.dll ASLR Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034654; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005; https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1216
CVE: CVE-2016-0009
Published: 2016-01-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified vectors, aka "Win32k Remote Code Execution Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1034654; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-005; http://www.securitytracker.com/id/1034654
CVE: CVE-2016-0010
Published: 2016-01-13
Description: Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034651; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004; http://www.securitytracker.com/id/1034651
CVE: CVE-2016-0011
Published: 2016-01-13
Description: Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1034653; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004; http://www.securitytracker.com/id/1034653
CVE: CVE-2016-0012
Published: 2016-01-13
Description: Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1034651; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004; http://www.securitytracker.com/id/1034651
CVE: CVE-2016-0014
Published: 2016-01-13
Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securitytracker.com/id/1034661; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007; http://www.securitytracker.com/id/1034661
CVE: CVE-2016-0015
Published: 2016-01-13
Description: DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "DirectShow Heap Corruption Remote Code Execution Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/135232/Microsoft-DirectShow-Remote-Code-Execution.html; http://www.securitytracker.com/id/1034660; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007