{"api_version":"1","generated_at":"2026-07-23T04:28:16+00:00","cve":"CVE-2016-5228","urls":{"html":"https://cve.report/CVE-2016-5228","api":"https://cve.report/api/cve/CVE-2016-5228.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-5228","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-5228"},"summary":{"title":"CVE-2016-5228","description":"Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability.","state":"PUBLISHED","assigner":"microfocus","published_at":"2016-07-03 01:59:09","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx","name":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Micro Focus Rumba 9.x Security update - Rumba Knowledge Base - Rumba - Micro Focus Community","mime":"text/html","httpstatus":"500","archivestatus":"200"},{"url":"https://cxsecurity.com/issue/WLB-2016050136","name":"https://cxsecurity.com/issue/WLB-2016050136","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/40649/","name":"https://www.exploit-db.com/exploits/40649/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Micro Focus Rumba 9.3 - ActiveX Stack Buffer Overflow (PoC) - Windows dos Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php","name":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zero Science Lab » Micro Focus Rumba+ v9.4 Multiple Stack Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5228","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5228","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"5228","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microfocus","cpe5":"rumba","cpe6":"9.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T00:53:48.716Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://cxsecurity.com/issue/WLB-2016050136"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx"},{"name":"40649","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/40649/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-06-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-01-06T16:15:41.000Z","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","shortName":"microfocus"},"references":[{"tags":["x_refsource_MISC"],"url":"https://cxsecurity.com/issue/WLB-2016050136"},{"tags":["x_refsource_CONFIRM"],"url":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx"},{"name":"40649","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/40649/"},{"tags":["x_refsource_MISC"],"url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@microfocus.com","ID":"CVE-2016-5228","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://cxsecurity.com/issue/WLB-2016050136","refsource":"MISC","url":"https://cxsecurity.com/issue/WLB-2016050136"},{"name":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx","refsource":"CONFIRM","url":"http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28600.micro-focus-rumba-9-x-security-update.aspx"},{"name":"40649","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/40649/"},{"name":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php","refsource":"MISC","url":"http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php"}]}}}},"cveMetadata":{"assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","assignerShortName":"microfocus","cveId":"CVE-2016-5228","datePublished":"2016-07-03T01:00:00.000Z","dateReserved":"2016-05-31T00:00:00.000Z","dateUpdated":"2024-08-06T00:53:48.716Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-07-03 01:59:09","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:rumba:9.4:*:*:*:*:*:*:*","matchCriteriaId":"2505F7B7-F0A6-40F4-950B-B3FFB4A2BF0A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"5228","Ordinal":"1","Title":"CVE-2016-5228","CVE":"CVE-2016-5228","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"5228","Ordinal":"1","NoteData":"Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 but that is not a correct ID for any Rumba vulnerability.","Type":"Description","Title":"CVE-2016-5228"},{"CveYear":"2016","CveId":"5228","Ordinal":"2","NoteData":"2016-07-02","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"5228","Ordinal":"3","NoteData":"2021-01-06","Type":"Other","Title":"Modified"}]}}}