CVE-2016-3315

CWE-200 — Information Exposure4 documents4 sources
Severity
5.5MEDIUM
EPSS
34.7%
top 2.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft OnenoteMicrosoft Onenote FOR MAC
Timeline
PublishedAug 9
Latest updateMay 14

Description

Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶NVDmicrosoft/onenote4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-pfp2-c9q6-64cg: Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a craft↗2022-05-14
▶
CVEList
CVE-2016-3315: Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a craft↗2016-08-09
▶

📋Vendor Advisories

1
Microsoft
Microsoft OneNote Information Disclosure Vulnerability↗2016-08-09
▶
CVE-2016-3315 (MEDIUM CVSS 5.5) | Microsoft OneNote 2007 SP3 | cvebase.io