CVE-2016-7241

Опубликовано: 10 нояб. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Высокий

Описание

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Ссылки

http://packetstormsecurity.com/files/139991/Microsoft-Edge-JSON.parse-Information-Leak.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94055
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037245
https://bugs.chromium.org/p/project-zero/issues/detail?id=952
Issue Tracking
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-142
https://www.exploit-db.com/exploits/40875/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/139991/Microsoft-Edge-JSON.parse-Information-Leak.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/94055
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037245
https://bugs.chromium.org/p/project-zero/issues/detail?id=952
Issue Tracking
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-142
https://www.exploit-db.com/exploits/40875/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.75027

Высокий

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-7241

CVSS3: 4.2

msrc

больше 8 лет назад

Microsoft Browser Memory Corruption Vulnerability

GHSA-83qj-2pwf-j9c2