{"id":"CVE-2016-3220","published":"2016-06-16T01:00:00Z","modified":"2024-08-05T23:47:58Z","title":"atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1…","vendor":null,"product":null,"tier":"tail","description":{"text":"atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka \"ATMFD.dll Elevation of Privilege Vulnerability.\"","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.06256,"percentile":0.93537,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.exploit-db.com/exploits/39991/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-074","tags":["vendor-advisory","x_refsource_MS"]},{"url":"http://www.securitytracker.com/id/1036101","tags":["vdb-entry","x_refsource_SECTRACK"]}],"priority":{"score":23.7,"factors":[{"name":"EPSS percentile","points":18.71},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2016-06-21"},"first":{"date":"2016-06-21","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/39991"},"provenance":"source"},"euvd":{"id":"EUVD-2016-4258","exploited":false,"provenance":"source"},"exploits":[{"id":39991,"url":"https://www.exploit-db.com/exploits/39991","title":"Microsoft Windows Kernel - 'ATMFD.dll' NamedEscape 0x250C Pool Corruption (MS16-074)","date":"2016-06-21","verified":true,"provenance":"source"}],"exploitRefs":["https://www.exploit-db.com/exploits/39991/"],"lineage":{"familyId":"fam-microsoft-corporation-windows-graphics-c-cve-2016-3216","children":[{"from":"CVE-2016-3220","to":"CVE-2017-0038","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3216, CVE-2016-3219, and/or CVE-2016-3220.","from":"CVE.org","in":"CVE-2017-0038"}]}]}}