VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 9, 2016· Updated Jun 17, 2026

CVE-2016-3303

CVE-2016-3303

Description

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Component RCE Vulnerability," a different vulnerability than CVE-2016-3304.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Microsoft/Live Meeting
    cpe:2.3:a:microsoft:live_meeting:2007:*:*:*:*:*:*:*
  • Microsoft/Lync3 versions
    cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:lync:2010:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*
    • cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
  • Microsoft/Office2 versions
    cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • Microsoft/Skype For Business
    cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
  • Microsoft/Word Viewer
    cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
  • Microsoft/Windows 7
    cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
  • Microsoft/Windows
    cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
  • Microsoft/Windows Font Libraryllm-create

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.