CVE-2016-0200Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Internet Explorer

Severity
8.8HIGHNVD
EPSS
14.0%
top 5.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 16
Latest updateMay 14

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0199 and CVE-2016-3211.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

6
GHSA
GHSA-v2q7-558q-p2qh: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf2022-05-14
GHSA
GHSA-m4vr-qxj3-p6xm: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf2022-05-14
GHSA
GHSA-w823-xr62-8g3q: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf2022-05-14
CVEList
CVE-2016-3211: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf2016-06-16
CVEList
CVE-2016-0200: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf2016-06-16

💥Exploits & PoCs

1
Exploit-DB
Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation2017-01-24

📋Vendor Advisories

1
Microsoft
Internet Explorer Memory Corruption Vulnerability2016-06-14

🕵️Threat Intelligence

2
Talos
Vulnerability Spotlight: Iceni Argus Buffer Overflows2016-10-26
Zscaler
Zscaler found Multiple Security Vulnerabilities | 06-14-2016

💬Community

2
Bugzilla
CVE-2019-3831 vdsm: privilege escalation to root via systemd_run2019-02-14
Bugzilla
CVE-2016-8577 Qemu: 9pfs: host memory leakage in v9fs_read2016-10-10
CVE-2016-0200 — Microsoft vulnerability | cvebase