CVE-2016-3374

Impact

The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3370.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html
• http://srcincite.io/advisories/src-2016-39/
• http://www.securityfocus.com/bid/92838
• http://www.securitytracker.com/id/1036789
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115
• http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html
• http://srcincite.io/advisories/src-2016-39/
• http://www.securityfocus.com/bid/92838
• http://www.securitytracker.com/id/1036789
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-115