CVE-2016-0016

2 known exploits for CVE-2016-0016

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

Affected products: Windows, Windows 10, Windows 7, Windows 8, Windows 8.1, Windows Rt, Windows Server 2008, Windows Server 2012
Microsoft Windows 10: All versions
Microsoft Windows 7: All versions
Microsoft Windows 8: All versions
Microsoft Windows 8.1: All versions
Microsoft Windows Rt: All versions
Microsoft Windows Rt 8.1: All versions

Fix: Available
CVSS 3.0: 7.8 HIGH
EPSS: 33.9% (98th percentile)
Weakness: CWE-426
NVD status: Modified
Published: 2016-01-13

CVE-2016-0016 at NVD

Authoritative description, scoring and affected products

Microsoft Office / COM Object - 'WMALFXGFXDSP.dll' DLL Planting (MS16-007)

2016-01-13 Google Security ResearchEXPLOITDB

Microsoft Office - COM Object DLL Planting with WMALFXGFXDSP.dll (MS16-007)

2016-01-13 Google Security ResearchZDT