VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 14, 2016· Updated Jun 17, 2026

CVE-2016-3209

CVE-2016-3209

Description

Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

33
  • Microsoft/Word Viewerllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*
  • Microsoft/Officellm-fuzzy3 versions
    2007 SP3; 2010 SP2+ 2 more
    • (no CPE)range: 2007 SP3; 2010 SP2
    • cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • Microsoft/.net Frameworkllm-fuzzy6 versions
    3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6+ 5 more
    • (no CPE)range: 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
  • Microsoft/Windowsllm-fuzzy2 versions
    Vista SP2; Server 2008 SP2 and R2 SP1; 7 SP1; 8.1; Server 2012 Gold and R2; RT 8.1; 10 Gold, 1511, and 1607+ 1 more
    • (no CPE)range: Vista SP2; Server 2008 SP2 and R2 SP1; 7 SP1; 8.1; Server 2012 Gold and R2; RT 8.1; 10 Gold, 1511, and 1607
    • cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
  • Microsoft/Silverlightllm-fuzzy2 versions
    5+ 1 more
    • (no CPE)range: 5
    • cpe:2.3:a:microsoft:silverlight:5.0:*:*:*:*:*:*:*
  • Microsoft/Skype For Businessllm-fuzzy2 versions
    2016+ 1 more
    • (no CPE)range: 2016
    • cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
  • Microsoft/Lyncllm-fuzzy4 versions
    2013 SP1; 2010; 2010 Attendee+ 3 more
    • (no CPE)range: 2013 SP1; 2010; 2010 Attendee
    • cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*
    • cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
  • Microsoft/Live Meeting 2007 Consolellm-fuzzy
    Range: 2007
  • Microsoft/Live Meeting
    cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*
  • Microsoft/Windows 10 19093 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
  • Microsoft/Windows 7
    cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
  • Microsoft/Windows 8.1
    cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
  • Microsoft/Windows Rt 8.1
    cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
  • Microsoft/Windows Server 20122 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.