CVE-2016-3210Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Internet Explorer

Severity
8.8HIGHNVD
EPSS
17.9%
top 4.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 16
Latest updateMay 14

Description

The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-7j7w-r8q7-jxh2: The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denia2022-05-14
CVEList
CVE-2016-3210: The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denia2016-06-16
VulnCheck
Microsoft Internet Explorer Improper Restriction of Operations within the Bounds of a Memory Buffer2016

🔍Detection Rules

2
Suricata
ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 302016-11-30
Suricata
ET EXPLOIT CVE-2016-3210 Exploit Observed ITW M1 Nov 302016-11-30

📋Vendor Advisories

1
Microsoft
Scripting Engine Memory Corruption Vulnerability2016-06-14

🕵️Threat Intelligence

1
Zscaler
Zscaler found Multiple Security Vulnerabilities | 06-14-2016
CVE-2016-3210 — Microsoft vulnerability | cvebase