Microsoft APP-V ASLR Bypass Vulnerability

CVE-2016-0137 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."

Learn more about our Cis Benchmark Audit For Microsoft Office.