CVE-2016-0016

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka DLL Loading Remote Code Execution Vulnerability.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
6.222

Associated Vulnerability

VulnerabilityOS Platform
Cumulative Update for Windows 10 for x64-based Systems (KB3124266)Windows
Cumulative Update for Windows 10 Version 1511 (KB3124263)Windows
Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3124263)Windows
Security Update for Windows Vista (KB3121918)Windows
Security Update for Windows Server 2008 (KB3121918)Windows
Security Update for Windows 7 (KB3121918)Windows
Security Update for Windows 8 (KB3121918)Windows
Security Update for Windows 8.1 (KB3121918)Windows
Security Update for Windows Vista for x64-based Systems (KB3121918)Windows
Security Update for Windows Server 2008 x64 Edition (KB3121918)Windows
Security Update for Windows 7 for x64-based Systems (KB3121918)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB3121918)Windows
Security Update for Windows 8 for x64-based Systems (KB3121918)Windows
Security Update for Windows Server 2012 (KB3121918)Windows
Security Update for Windows 8.1 for x64-based Systems (KB3121918)Windows
Security Update for Windows Server 2012 R2 (KB3121918)Windows
Security Update for Windows Vista (KB3109560)Windows
Security Update for Windows Server 2008 (KB3109560)Windows
Security Update for Windows 7 (KB3109560)Windows
Security Update for Windows 8 (KB3109560)Windows
Security Update for Windows 8.1 (KB3109560)Windows
Security Update for Windows Vista for x64-based Systems (KB3109560)Windows
Security Update for Windows Server 2008 x64 Edition (KB3109560)Windows
Security Update for Windows 7 for x64-based Systems (KB3109560)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB3109560)Windows
Security Update for Windows 8 for x64-based Systems (KB3109560)Windows
Security Update for Windows Server 2012 (KB3109560)Windows
Security Update for Windows 8.1 for x64-based Systems (KB3109560)Windows
Security Update for Windows Server 2012 R2 (KB3109560)Windows
Security Update for Windows Vista (KB3110329)Windows
Security Update for Windows Vista (KB3110329)Windows
Security Update for Windows 7 (KB3110329)Windows
Security Update for Windows 8 (KB3110329)Windows
Security Update for Windows 8.1 (KB3110329)Windows
Security Update for Windows Vista for x64-based Systems (KB3110329)Windows
Security Update for Windows Server 2008 x64 Edition (KB3110329)Windows
Security Update for Windows 7 for x64-based Systems (KB3110329)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB3110329)Windows
Security Update for Windows 8 for x64-based Systems (KB3110329)Windows
Security Update for Windows Server 2012 (KB3110329)Windows
Security Update for Windows 8.1 for x64-based Systems (KB3110329)Windows
Security Update for Windows Server 2012 R2 (KB3110329)Windows
Security Update for Windows Vista (KB3108664)Windows
Security Update for Windows Server 2008 (KB3108664)Windows
Security Update for Windows 7 (KB3108664)Windows
Security Update for Windows Vista for x64-based Systems (KB3108664)Windows
Security Update for Windows Server 2008 x64 Edition (KB3108664)Windows
Security Update for Windows 7 for x64-based Systems (KB3108664)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB3108664)Windows
Security Update for Windows 7 (KB3121461)Windows
Security Update for Windows 8 (KB3121461)Windows
Security Update for Windows 8.1 (KB3121461)Windows
Security Update for Windows 7 for x64-based Systems (KB3121461)Windows
Security Update for Windows 8 for x64-based Systems (KB3121461)Windows
Security Update for Windows 8.1 for x64-based Systems (KB3121461)Windows
Security Update for Windows Server 2012 R2 (KB3121461)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-19746Cumulative Update for Windows 10 for x64-based Systems (KB3124266)
PATCH-19747Cumulative Update for Windows 10 Version 1511 (KB3124263)
PATCH-19748Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3124263)
PATCH-19839Security Update for Windows Vista (KB3121918)
PATCH-19840Security Update for Windows Server 2008 (KB3121918)
PATCH-19841Security Update for Windows 7 (KB3121918)
PATCH-19842Security Update for Windows 8 (KB3121918)
PATCH-19843Security Update for Windows 8.1 (KB3121918)
PATCH-19844Security Update for Windows Vista for x64-based Systems (KB3121918)
PATCH-19845Security Update for Windows Server 2008 x64 Edition (KB3121918)
PATCH-19846Security Update for Windows 7 for x64-based Systems (KB3121918)
PATCH-19847Security Update for Windows Server 2008 R2 x64 Edition (KB3121918)
PATCH-19848Security Update for Windows 8 for x64-based Systems (KB3121918)
PATCH-19849Security Update for Windows Server 2012 (KB3121918)
PATCH-19850Security Update for Windows 8.1 for x64-based Systems (KB3121918)
PATCH-19851Security Update for Windows Server 2012 R2 (KB3121918)
PATCH-19852Security Update for Windows Vista (KB3109560)
PATCH-19853Security Update for Windows Server 2008 (KB3109560)
PATCH-19854Security Update for Windows 7 (KB3109560)
PATCH-19855Security Update for Windows 8 (KB3109560)
PATCH-19856Security Update for Windows 8.1 (KB3109560)
PATCH-19857Security Update for Windows Vista for x64-based Systems (KB3109560)
PATCH-19858Security Update for Windows Server 2008 x64 Edition (KB3109560)
PATCH-19859Security Update for Windows 7 for x64-based Systems (KB3109560)
PATCH-19860Security Update for Windows Server 2008 R2 x64 Edition (KB3109560)
PATCH-19861Security Update for Windows 8 for x64-based Systems (KB3109560)
PATCH-19862Security Update for Windows Server 2012 (KB3109560)
PATCH-19863Security Update for Windows 8.1 for x64-based Systems (KB3109560)
PATCH-19864Security Update for Windows Server 2012 R2 (KB3109560)
PATCH-19865Security Update for Windows Vista (KB3110329)
PATCH-19866Security Update for Windows Vista (KB3110329)
PATCH-19867Security Update for Windows 7 (KB3110329)
PATCH-19868Security Update for Windows 8 (KB3110329)
PATCH-19869Security Update for Windows 8.1 (KB3110329)
PATCH-19870Security Update for Windows Vista for x64-based Systems (KB3110329)
PATCH-19871Security Update for Windows Server 2008 x64 Edition (KB3110329)
PATCH-19872Security Update for Windows 7 for x64-based Systems (KB3110329)
PATCH-19873Security Update for Windows Server 2008 R2 x64 Edition (KB3110329)
PATCH-19874Security Update for Windows 8 for x64-based Systems (KB3110329)
PATCH-19875Security Update for Windows Server 2012 (KB3110329)
PATCH-19876Security Update for Windows 8.1 for x64-based Systems (KB3110329)
PATCH-19877Security Update for Windows Server 2012 R2 (KB3110329)
PATCH-19878Security Update for Windows Vista (KB3108664)
PATCH-19879Security Update for Windows Server 2008 (KB3108664)
PATCH-19880Security Update for Windows 7 (KB3108664)
PATCH-19881Security Update for Windows Vista for x64-based Systems (KB3108664)
PATCH-19882Security Update for Windows Server 2008 x64 Edition (KB3108664)
PATCH-19883Security Update for Windows 7 for x64-based Systems (KB3108664)
PATCH-19884Security Update for Windows Server 2008 R2 x64 Edition (KB3108664)
PATCH-19885Security Update for Windows 7 (KB3121461)
PATCH-19886Security Update for Windows 8 (KB3121461)
PATCH-19887Security Update for Windows 8.1 (KB3121461)
PATCH-19888Security Update for Windows 7 for x64-based Systems (KB3121461)
PATCH-19889Security Update for Windows 8 for x64-based Systems (KB3121461)
PATCH-19890Security Update for Windows 8.1 for x64-based Systems (KB3121461)
PATCH-19891Security Update for Windows Server 2012 R2 (KB3121461)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234