Title

Microsoft Windows OLE Remote Code Execution Vulnerability (MS16-044) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Windows Object Linking and Embedding (OLE) technology. Microsoft OLE is the technology that applications use to create and edit compound documents. To exploit this vulnerability, an attacker would entice a user to view a malicious file via email sent or hosted webpage. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68367

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.