Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2016-3321 | First vendor Publication | 2016-08-09 |
Vendor | Cve | Last vendor Modification | 2018-10-12 |
Security-Database Scoring CVSS v3
Cvss vector : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N | |||
---|---|---|---|
Overall CVSS Score | 2.5 | ||
Base Score | 2.5 | Environmental Score | 2.5 |
impact SubScore | 1.4 | Temporal Score | 2.5 |
Exploitabality Sub Score | 1 | ||
Attack Vector | Local | Attack Complexity | High |
Privileges Required | Low | User Interaction | None |
Scope | Unchanged | Confidentiality Impact | Low |
Integrity Impact | None | Availability Impact | None |
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:M/Au:N/C:P/I:N/A:N) | |||
---|---|---|---|
Cvss Base Score | 1.9 | Attack Range | Local |
Cvss Impact Score | 2.9 | Attack Complexity | Medium |
Cvss Expoit Score | 3.4 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability." |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3321 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-200 | Information Exposure |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 2 |
Snort® IPS/IDS
Date | Description |
---|---|
2019-02-19 | Microsoft Internet Explorer page layout use after free attempt RuleID : 48899 - Revision : 2 - Type : BROWSER-IE |
2019-02-19 | Microsoft Internet Explorer page layout use after free attempt RuleID : 48898 - Revision : 2 - Type : BROWSER-IE |
2018-08-23 | Microsoft Internet Explorer page layout use after free attempt RuleID : 47311 - Revision : 1 - Type : BROWSER-IE |
2018-08-23 | Microsoft Internet Explorer page layout use after free attempt RuleID : 47310 - Revision : 1 - Type : BROWSER-IE |
2016-12-20 | Microsoft Internet Explorer iertutil.dll long UNC redirect out of bounds read... RuleID : 40788 - Revision : 2 - Type : BROWSER-IE |
2016-12-20 | Microsoft Internet Explorer iertutil.dll long UNC redirect out of bounds read... RuleID : 40787 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Windows Internet Explorer MSHTML.dll type confusion attempt RuleID : 39840 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Windows Internet Explorer MSHTML.dll type confusion attempt RuleID : 39839 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer InsertSelectDropdown use after free attempt RuleID : 39834 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer InsertSelectDropdown use after free attempt RuleID : 39833 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer mshtml.dll cached object use after free attempt RuleID : 39829 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer mshtml.dll cached object use after free attempt RuleID : 39828 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer CStr internal string use-after-free attempt RuleID : 39827 - Revision : 4 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer CStr internal string use-after-free attempt RuleID : 39826 - Revision : 4 - Type : BROWSER-IE |
2016-09-08 | Microsoft Edge edgehtml.dll invalid history state use after free attempt RuleID : 39823 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Edge edgehtml.dll invalid history state use after free attempt RuleID : 39822 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer iframe sandbox file name information disclosure a... RuleID : 39821 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer iframe sandbox file name information disclosure a... RuleID : 39820 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer page layout use after free attempt RuleID : 39813 - Revision : 3 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer page layout use after free attempt RuleID : 39812 - Revision : 3 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer iertutil.dll long UNC redirect out of bounds read... RuleID : 39811 - Revision : 2 - Type : BROWSER-IE |
2016-09-08 | Microsoft Internet Explorer iertutil.dll long UNC redirect out of bounds read... RuleID : 39810 - Revision : 2 - Type : BROWSER-IE |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2016-08-09 | Name : The remote host has a web browser installed that is affected by multiple vuln... File : smb_nt_ms16-095.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2021-05-04 12:48:49 |
|
2021-04-22 01:59:41 |
|
2020-05-23 13:17:08 |
|
2020-05-23 00:50:39 |
|
2018-10-13 05:19:03 |
|
2018-10-10 00:19:59 |
|
2017-08-16 09:22:56 |
|
2016-11-29 00:26:07 |
|
2016-08-11 21:23:28 |
|
2016-08-10 13:25:32 |
|
2016-08-10 05:23:11 |
|