Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability."

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple information disclosure vulnerabilities exist in     the Windows GDI component due to improper handling of     objects in memory. A local attacker can exploit these     vulnerabilities, via a specially crafted application, to     predict memory offsets in a call stack and bypass the     Address Space Layout Randomization (ASLR) feature,     resulting in the disclosure of memory contents.
    (CVE-2016-3209, CVE-2016-3262, CVE-2016-3263)

  - An elevation of privilege vulnerability exists in the     Windows kernel due to improper handling of objects in     memory. A local attacker can exploit this to elevate     privileges and execute code in kernel mode.
    (CVE-2016-3270)

  - A remote code execution vulnerability exists in the     Windows GDI component due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit this vulnerability by convincing a user to     visit a specially crafted website or open a specially     crafted file, resulting in the execution of arbitrary     code in the context of the current user. (CVE-2016-3393)

  - A remote code execution vulnerability exists in the     Windows font library due to improper handling of     embedded fonts. An unauthenticated, remote attacker     can exploit this vulnerability by convincing a user to     visit a specially crafted website or open a specially     crafted document file, resulting in the execution of     arbitrary code in the context of the current user.
    (CVE-2016-3396)   
  - An elevation of privilege vulnerability exists in the     Windows GDI component due to improper handling of     objects in memory. A local attacker can exploit this to     elevate privileges and execute code in kernel mode.
    (CVE-2016-7182)

The version of Microsoft Silverlight installed on the remote macOS or Mac OS X host is affected by an information disclosure vulnerability in the Graphics Device Interface (GDI) component due to improper handling of objects in memory. A local attacker can exploit this vulnerability, via a specially crafted application, to predict memory offsets in a call stack and bypass the Address Space Layout Randomization (ASLR) feature, resulting in the disclosure of memory contents.

ID	Name	Product	Family	Type	Severity
94017	MS16-120: Security Update for Microsoft Graphics Component (3192884)	Nessus	Windows : Microsoft Bulletins	Local	critical
94010	MS16-120: Security Update for Microsoft Graphics Component (3192884) (macOS)	Nessus	MacOS X Local Security Checks	Local	medium

Detections

Analytics

CVE-2016-3209

medium

Tenable Plugins

critical

medium