CVE-2016-0005 — Improper Input Validation in Microsoft Internet Explorer

CWE-20 — Improper Input ValidationCWE-290 — Authentication Bypass by Spoofing9 documents8 sources
Severity
4.3MEDIUMNVD
EPSS
31.1%
top 3.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedJan 13
Latest updateMay 14

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-wpwp-47cp-xxcc: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elev↗2022-05-14
▶
CVEList
CVE-2016-0005: Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elev↗2016-01-13
▶

💥Exploits & PoCs

1
Exploit-DB
FreeBSD 10.2 (x64) - 'amd64_set_ldt' Heap Overflow↗2016-03-16
▶

📋Vendor Advisories

2
Red Hat
samba: Spoofing vulnerability when domain controller is configured↗2016-04-12
▶
Microsoft
CVE-2016-0005: Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:Yes;Exploited:No↗2016-01-12
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - January 2016↗2016-01-12
▶
Talos
Microsoft Patch Tuesday - January 2016↗2016-01-12
▶
CVE-2016-0005 — Improper Input Validation in Microsoft | cvebase