CVE-2016-0182
HighSummary
The vulnerability in Windows Journal allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, potentially leading to data loss or unauthorized access to organizational resources.
Recommendation
It is recommended to update operating systems to the latest versions and to avoid opening unknown .jnt files.
Other vulnerabilities in Windows Journal
See all- CVE-2016-0038High
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal file.
- CVE-2015-6097High
CVE-2015-6097 involves a heap-based buffer overflow in Windows Journal affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Remote attackers can execute arbitrary code via a crafted Journal (.jnt) file.
- CVE-2015-2530High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2519High
Integer overflow in Windows Journal in various versions of Windows allows remote attackers to execute arbitrary code via a crafted .jnt file.
- CVE-2015-2514High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2015-2513High
Windows Journal in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted .jnt file, known as 'Windows Journal RCE Vulnerability'.
- CVE-2014-1824High
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (.JNT) file.
Original NVD description (English source)
Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal (aka .jnt) file, aka "Windows Journal Memory Corruption Vulnerability."