Definition

New Search

Windows Graphics Component RCE Vulnerability – CVE-2016-3393 (MS16-120)

oval:org.cisecurity:def:1393

Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allows remote attackers to execute arbitrary code via a crafted web site aka "Windows Graphics Component RCE Vulnerability."

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows Server 2008
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2012
  • Microsoft Windows 7
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows 10
  • Microsoft Windows Vista
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows 8
Class:
vulnerability
Reference(s):
  • CVE-2016-3393
Product(s):