Microsoft Windows MF3216 Component Heap Buffer Overflow

Strike ID:
E20-0rtb1
CVSS:
4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)
False Positive:
f
Variants:
2
Year:
2019

Description

This strike exploits a heap buffer overflow vulnerability in MF3216 component of Microsoft Windows. The vulnerability is due to improper handling of EMF records. An attacker could gain arbitrary code execution by enticing the user to open and save a malicious EMF or RTF file.

CVE

References