Vulnerability CVE-2016-0160
Published: 2016-04-12   Modified: 2016-04-13

Description:
Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability
Sandro Poppi
17.04.2016

Type:

CWE-Other

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Microsoft -> Internet explorer 

 References:
http://packetstormsecurity.com/files/136702/Microsoft-Internet-Explorer-11-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2016/Apr/61
http://www.securityfocus.com/archive/1/538098/100/0/threaded
http://www.securitytracker.com/id/1035521
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037
Copyright 2024, cxsecurity.com

 

Back to Top