Vulnerability Details CVE-2016-0162
Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.19
EPSS Ranking 95.0%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.3
Proposed Action
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
Ransomware Campaign
Unknown
References
- http://www.securityfocus.com/bid/85939
- http://www.securitytracker.com/id/1035521
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037
- http://www.securityfocus.com/bid/85939
- http://www.securitytracker.com/id/1035521
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037
Products affected by CVE-2016-0162
-
cpe:2.3:a:microsoft:internet_explorer:10
-
cpe:2.3:a:microsoft:internet_explorer:11
-
cpe:2.3:a:microsoft:internet_explorer:9
-
cpe:2.3:o:microsoft:windows_10_1507:-
-
cpe:2.3:o:microsoft:windows_10_1511:-
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_8.1:-
-
cpe:2.3:o:microsoft:windows_rt_8.1:-
-
cpe:2.3:o:microsoft:windows_server_2008:-
-
cpe:2.3:o:microsoft:windows_server_2008:r2
-
cpe:2.3:o:microsoft:windows_server_2012:-
-
cpe:2.3:o:microsoft:windows_server_2012:r2
-
cpe:2.3:o:microsoft:windows_vista:-