CVE-2016-0038
HighSummary
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious threat to the security of systems and organizational data.
Recommendation
It is recommended to update systems to the latest versions and disable Windows Journal if it is not necessary.
Other vulnerabilities in Windows Journal
See all- CVE-2016-0182High
The vulnerability in Windows Journal allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511.
- CVE-2015-6097High
CVE-2015-6097 involves a heap-based buffer overflow in Windows Journal affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Remote attackers can execute arbitrary code via a crafted Journal (.jnt) file.
- CVE-2015-2530High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2519High
Integer overflow in Windows Journal in various versions of Windows allows remote attackers to execute arbitrary code via a crafted .jnt file.
- CVE-2015-2514High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2513High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2014-1824High
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (.JNT) file.
Original NVD description (English source)
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file, aka "Windows Journal Memory Corruption Vulnerability."