{"api_version":"1","generated_at":"2026-07-23T01:32:02+00:00","cve":"CVE-2016-9176","urls":{"html":"https://cve.report/CVE-2016-9176","api":"https://cve.report/api/cve/CVE-2016-9176.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-9176","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9176"},"summary":{"title":"CVE-2016-9176","description":"Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code.","state":"PUBLISHED","assigner":"microfocus","published_at":"2016-11-04 00:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-119","Buffer Overflow"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/94236","name":"http://www.securityfocus.com/bid/94236","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Micro Focus Rumba CVE-2016-9176 Multiple Local Stack Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/40648/","name":"https://www.exploit-db.com/exploits/40648/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Micro Focus Rumba 9.4 - Local Denial of Service - Windows dos Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9176","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9176","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Micro Focus","product":"Micro Focus Rumba 9.4","version":"affected Micro Focus Rumba 9.4","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"9176","vulnerable":"1","versionEndIncluding":"9.4.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microfocus","cpe5":"rumba","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2016","cve_id":"9176","cve":"CVE-2016-9176","epss":"0.019140000","percentile":"0.834420000","score_date":"2026-05-10","updated_at":"2026-05-11 00:14:43"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T02:42:10.918Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"94236","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/94236"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.exploit-db.com/exploits/40648/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Micro Focus Rumba 9.4","vendor":"Micro Focus","versions":[{"status":"affected","version":"Micro Focus Rumba 9.4"}]}],"datePublic":"2016-11-03T00:00:00.000Z","descriptions":[{"lang":"en","value":"Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code."}],"problemTypes":[{"descriptions":[{"description":"Buffer Overflow","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-01-06T16:15:50.000Z","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","shortName":"microfocus"},"references":[{"name":"94236","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/94236"},{"tags":["x_refsource_MISC"],"url":"https://www.exploit-db.com/exploits/40648/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@microfocus.com","ID":"CVE-2016-9176","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Micro Focus Rumba 9.4","version":{"version_data":[{"version_value":"Micro Focus Rumba 9.4"}]}}]},"vendor_name":"Micro Focus"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Overflow"}]}]},"references":{"reference_data":[{"name":"94236","refsource":"BID","url":"http://www.securityfocus.com/bid/94236"},{"name":"https://www.exploit-db.com/exploits/40648/","refsource":"MISC","url":"https://www.exploit-db.com/exploits/40648/"}]}}}},"cveMetadata":{"assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","assignerShortName":"microfocus","cveId":"CVE-2016-9176","datePublished":"2016-11-04T00:00:00.000Z","dateReserved":"2016-11-03T00:00:00.000Z","dateUpdated":"2024-08-06T02:42:10.918Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-11-04 00:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-119","Buffer Overflow"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:rumba:*:*:*:*:*:*:*:*","versionEndIncluding":"9.4.0","matchCriteriaId":"D41E6025-5301-4CA0-9C1E-AAD27702C6DB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"9176","Ordinal":"1","Title":"CVE-2016-9176","CVE":"CVE-2016-9176","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"9176","Ordinal":"1","NoteData":"Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code.","Type":"Description","Title":"CVE-2016-9176"},{"CveYear":"2016","CveId":"9176","Ordinal":"2","NoteData":"2016-11-03","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"9176","Ordinal":"3","NoteData":"2021-01-06","Type":"Other","Title":"Modified"}]}}}