Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2016-3235

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确地验证输入。本地攻击者可利用该漏洞控制受影响的系统。以下版本受到影响：Microsoft Visio 2007 SP3，Visio 2010 SP2，Visio 2013 SP1，Visio 2016，Visio Viewer 2007 SP3

AI Predicted 7.8 Difficulty: Moderate KEV EPSS 43.43% · P99
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2016-3235

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Office OLE DLL端加载漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确地验证输入。本地攻击者可利用该漏洞控制受影响的系统。以下版本受到影响：Microsoft Visio 2007 SP3，Visio 2010 SP2，Visio 2013 SP1，Visio 2016，Visio Viewer 2007 SP3
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2016-3235

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-3235

请登录查看更多情报信息。

Vendor Advisories for CVE-2016-3235 (3)

Exploits & Public PoCs for CVE-2016-3235 (1)

Mailing List Discussions for CVE-2016-3235 (1)

Other References for CVE-2016-3235 (1)

Same Patch Batch · n/a · 2016-06-16 · 94 CVEs total

CVE-2016-0199 Microsoft Internet Explorer 内存损坏漏洞
CVE-2016-5361 Libreswan 拒绝服务漏洞
CVE-2016-4167 Adobe DNG Software Development Kit 安全漏洞
CVE-2016-4163 多款Adobe产品安全漏洞
CVE-2016-4162 多款Adobe产品安全漏洞
CVE-2016-4161 多款Adobe产品安全漏洞
CVE-2016-4160 多款Adobe产品安全漏洞
CVE-2016-4159 Adobe ColdFusion 跨站脚本漏洞
CVE-2016-4164 Adobe Brackets 跨站脚本漏洞
CVE-2016-0028 Microsoft Exchange 信息泄漏漏洞
CVE-2016-0025 Microsoft Office 内存损坏漏洞
CVE-2016-0200 Microsoft Internet Explorer 内存损坏漏洞
CVE-2016-3198 Microsoft Edge 安全功能绕过漏洞
CVE-2016-3199 Microsoft Edge Chakra JavaScript脚本引擎内存损坏漏洞
CVE-2016-3201 Microsoft Windows和Microsoft Edge PDF 信息泄露漏洞
CVE-2016-3202 Microsoft 脚本引擎内存损坏漏洞
CVE-2016-3203 Microsoft Windows和Microsoft Edge PDF 远程代码执行漏洞
CVE-2016-3205 Microsoft Internet Explorer 脚本引擎内存损坏漏洞
CVE-2016-3206 Microsoft Internet Explorer 脚本引擎内存损坏漏洞
CVE-2016-3207 Microsoft Internet Explorer 脚本引擎内存损坏漏洞

Showing top 20 of 94 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-3235

No comments yet

Leave a comment