Lucene search

K
cve[email protected]CVE-2016-3201
HistoryJun 16, 2016 - 1:59 a.m.

CVE-2016-3201

2016-06-1601:59:08
CWE-200
web.nvd.nist.gov
38
cve-2016-3201
nvd
information security
microsoft windows
windows server
windows 10
microsoft edge
pdf
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.452 Medium

EPSS

Percentile

97.4%

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka “Windows PDF Information Disclosure Vulnerability,” a different vulnerability than CVE-2016-3215.

Affected configurations

NVD
Node
microsoftedgeMatch-
OR
microsoftwindows_10Match-
OR
microsoftwindows_10Match1511
OR
microsoftwindows_8.1
OR
microsoftwindows_server_2012
OR
microsoftwindows_server_2012Match-gold

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.452 Medium

EPSS

Percentile

97.4%