ZeroHour

CVE-2016-0183

CVSS 3.0
8.8 high
EPSS
16%p97
Published
()
Modified
Description

The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."

Vendors
microsoft
Products
office, office web apps, sharepoint server, word
Weakness
CWE-284
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news