SB2016110906 - Multiple vulnerabilities in Microsoft Graphics Component
Published: November 9, 2016
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Memory Corruption (CVE-ID: CVE-2016-7217)
A remote attacker can execute arbitrary code on the target system.
The vulnerability exists due to incorrect handling of objects in memory in Windows Media Foundation. A remote attacker can create a specially crafted document, trick the victim to open it and cause memory corruption.
Successful exploitation of the vulnerability may allow an attacker to execute arbitrary code on vulnerable system with privileges of the current user.
2) Memory Corruption (CVE-ID: CVE-2016-7205)
A remote attacker can execute arbitrary code on the target system.
The vulnerability exists due to incorrect handling of objects in memory in Windows Animation Manager. A remote attacker can create a specially crafted web page, trick the victim to visit it and cause memory corruption.
Successful exploitation of the vulnerability may allow an attacker to execute arbitrary code on vulnerable system with privileges of the current user.
3) Information Disclosure (CVE-ID: CVE-2016-7210)
A remote attacker can obtain potentially sensitive system information.
The vulnerability exists due to an error in ATMFD component. A remote attacker can create a specially crafted document, trick the victim to open it and obtain contents of the memory.
Successful exploitation of the vulnerability may allow an attacker to gain access to potentially sensitive information.
4) Memory Corruption (CVE-ID: CVE-2016-7256)
A remote attacker can execute arbitrary code on the target system.
The vulnerability exists due to incorrect handling of objects in memory in Windows font library when processing Open Type fonts. A remote attacker can create a specially crafted font file and cause memory corruption.
Successful exploitation of the vulnerability may allow an attacker to execute arbitrary code on vulnerable system with privileges of the current user.
Note: this vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.