Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3215.

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple information disclosure vulnerabilities exist     due to improper parsing of .pdf files. An     unauthenticated, remote attacker can exploit these     vulnerabilities by convincing a user to open a specially     crafted .pdf file, resulting in the disclosure of     sensitive information in the context of the current     user. (CVE-2016-3201, CVE-2016-3215)

  - A remote code execution vulnerability exists due to     improper parsing of .pdf files. An unauthenticated,     remote attacker can exploit this vulnerability by     convincing a user to open a specially crafted .pdf file,     resulting in the execution of arbitrary code in the     context of the current user. (CVE-2016-3203)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3163656. It is, therefore, affected by multiple vulnerabilities :

  - A security feature bypass vulnerability exists due to a     failure to properly validate specially crafted     documents. An unauthenticated, remote attacker can     exploit this vulnerability by convincing a user to load     a page or visit a website containing malicious content,     allowing the attacker to bypass the Edge Content     Security Policy (CSP). (CVE-2016-3198)

  - Multiple remote code execution vulnerabilities exist in     the Chakra JavaScript engine due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit these vulnerabilities by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document that hosts the Edge     rendering engine, resulting in the execution of     arbitrary code in the context of the current user.
    (CVE-2016-3199, CVE-2016-3202, CVE-2016-3214,     CVE-2016-3222)

  - Multiple information disclosure vulnerabilities exist     due to improper parsing of .pdf files. An     unauthenticated, remote attacker can exploit these     vulnerabilities by convincing a user to open a specially     crafted .pdf file, resulting in the disclosure of     sensitive information in the context of the current     user. (CVE-2016-3201, CVE-2016-3215)

  - A remote code execution vulnerability exists due to     improper parsing of .pdf files. An unauthenticated,     remote attacker can exploit this vulnerability by     convincing a user to open a specially crafted .pdf file,     resulting in the execution of arbitrary code in the     context of the current user. (CVE-2016-3203)

Note that CVE-2016-3214, CVE-2016-3215, and CVE-2016-3222 only affect Windows 10 version 1511.

ID	Name	Product	Family	Severity
91607	MS16-080: Security Update for Microsoft Windows PDF (3164302)	Nessus	Windows : Microsoft Bulletins	high
91597	MS16-068: Cumulative Security Update for Microsoft Edge (3163656)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2016-3201

medium

Tenable Plugins

high

high