CVE-2016-0021

Name of the Vulnerable Software and Affected Versions Microsoft InfoPath versions 2007 SP3, 2010 SP2, 2013 SP1

Description The issue is caused by a buffer overflow in Microsoft InfoPath, an XML-based form development tool. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted document.

Recommendations For Microsoft InfoPath 2007 SP3, update to a version that includes the fix for this issue. For Microsoft InfoPath 2010 SP2, update to a version that includes the fix for this issue. For Microsoft InfoPath 2013 SP1, update to a version that includes the fix for this issue.