CVE-2016-3351

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

CVSS v3 6.5 MEDIUM
CVSS v2.0 2.6 LOW

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.6^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/92788	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1036788	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1036789	Broken Link Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104	Patch Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105	Patch Vendor Advisory
https://www.brokenbrowser.com/detecting-apps-mimetype-malware/	Exploit
http://www.securityfocus.com/bid/92788	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1036788	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1036789	Broken Link Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104	Patch Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105	Patch Vendor Advisory
https://www.brokenbrowser.com/detecting-apps-mimetype-malware/	Exploit

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::

Configuration 2 (hide)

AND

cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_10_1507:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1607:-:::::::*
	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
	cpe:2.3:o:microsoft:windows_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*

Configuration 4 (hide)

AND

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_10_1507:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1607:-:::::::*

History

21 Nov 2024, 02:49

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/92788 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/92788 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1036788 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1036788 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1036789 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1036789 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - Patch, Vendor Advisory
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - Patch, Vendor Advisory
References	~~() https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ - Exploit~~	() https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ - Exploit

02 Jul 2024, 12:23

Type	Values Removed	Values Added
CPE		cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::: cpe:2.3:o:microsoft:windows_8.1:-:::::::* cpe:2.3:o:microsoft:windows_server_2012:-:::::::* cpe:2.3:o:microsoft:windows_vista:-:sp2:::::: cpe:2.3:o:microsoft:windows_10_1607:-:::::::* cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::* cpe:2.3:o:microsoft:windows_10_1507:-:::::::* cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_7:-:sp1:::::: cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
First Time		Microsoft windows 7 Microsoft windows Vista Microsoft windows 10 1507 Microsoft windows 10 1511 Microsoft windows 8.1 Microsoft windows Rt 8.1 Microsoft windows 10 1607 Microsoft windows Server 2008 Microsoft windows Server 2012
CVSS	v2 : ~~2.6~~ v3 : ~~3.1~~	v2 : 2.6 v3 : 6.5
CWE	~~CWE-200~~	NVD-CWE-noinfo
References	~~() http://www.securityfocus.com/bid/92788 -~~	() http://www.securityfocus.com/bid/92788 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1036788 -~~	() http://www.securitytracker.com/id/1036788 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1036789 -~~	() http://www.securitytracker.com/id/1036789 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - Patch, Vendor Advisory
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - Patch, Vendor Advisory
References	~~() https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ -~~	() https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ - Exploit

Information

Published : 2016-09-14 10:59

Updated : 2025-04-12 10:46

NVD link : CVE-2016-3351

Mitre link : CVE-2016-3351

CVE.ORG link : CVE-2016-3351

JSON object : View

Products Affected

microsoft

windows_server_2008
windows_8.1
windows_10_1507
internet_explorer
windows_10_1607
edge
windows_7
windows_rt_8.1
windows_server_2012
windows_10_1511
windows_vista

CWE

NVD-CWE-noinfo

6.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.6 /10

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2016-3351

6.5^/10

2.6^/10

Attach tags to `CVE-2016-3351`