Critical severity9.8NVD Advisory· Published Jul 3, 2016· Updated May 6, 2026

CVE-2016-5228

Description

Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability.

Affected products

Microfocus/Rumba
cpe:2.3:a:microfocus:rumba:9.4:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspxnvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.phpnvd
cxsecurity.com/issue/WLB-2016050136nvd
www.exploit-db.com/exploits/40649/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.041
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000