« Volver al listado

CVE-2016-3315

Estado: ModificadaMedia (5.5)—

Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — OnenoteMicrosoft — Onenote FOR MAC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-3315",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-08-09T21:59:21.677",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/92294",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1036559",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/92294",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1036559",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka \"Microsoft OneNote Information Disclosure Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016 y 2016 para Mac permiten a atacantes remotos obtener información sensible a través de un archivo OneNote manipulado, también conocida como \"Microsoft OneNote Information Disclosure Vulnerability\"."
    }
  ],
  "lastModified": "2026-06-17T00:45:28.843",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:onenote:2007:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83434795-4772-48E2-B604-9AAC6ECDE0B7"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:onenote:2010:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18AE1481-1E92-42F9-9E2E-C9C19353E580"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:onenote:2013:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE03F7A7-90F4-4D41-9529-B36937CD94D2"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:onenote:2013:sp1:*:*:rt:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBB1E19F-6870-429A-AB66-D7BBF3845AA2"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:onenote:2016:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80F1EA3D-FD2D-4CB2-A93A-DFAD3187AFC3"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:onenote_for_mac:2016:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91F0608A-554C-489C-859F-49A8F895D27A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}