CVE-2016-0041 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11....
HighCVSS 7.8
EPSS 82.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 10 | No fix listed |
| Microsoft internet explorer | = 11 | No fix listed |
| Microsoft windows 10 | All versions | No fix listed |
| Microsoft windows 10 | = 1511 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows rt 8.1 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Windows Server 2012 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- 20160210 NPS Datastore server DLL side loading vulnerability mailing-list
- 1034971 vdb-entry
- 1034985 vdb-entry
- MS16-009 vendor-advisory
- MS16-014 vendor-advisory
- www.securify.nl