Skip to content

CVE-2016-3315 Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Informatio...

MediumCVSS 5.5 EPSS 30.2%
Published
Updated
Exploit status
No public exploit known

Description

Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft onenote = 2007-sp3 No fix listed
Microsoft onenote = 2010-sp2 No fix listed
Microsoft onenote = 2013-sp1 No fix listed
Microsoft onenote = 2016 No fix listed
Microsoft onenote for mac = 2016 No fix listed

References