high8.4Public exploit code
CVE-2016-0100
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit)2015-12-08 · local · windows · Verified
Impact
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Validation Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Server 2008 | All versions |
| Microsoft | Windows Vista | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/83930
- http://www.securitytracker.com/id/1035205
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-025
- http://www.securityfocus.com/bid/83930
- http://www.securitytracker.com/id/1035205
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-025