Security Vulnerabilities fixed in Microsoft Graphics Component MS16-097

Description

This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, and Microsoft Lync. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Affected Applications

Windows 7
Windows Server 2008 R2
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows RT 8.1
Windows 10
Microsoft Office 2007
Microsoft Office 2010
Skype for Business 2016
Microsoft Lync 2013
Microsoft Lync 2010
Microsoft Live Meeting 2007 Console

CVE References

CVE-2016-3301 CVE-2016-3303 CVE-2016-3304

Other References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3301