PT-2016-2929 · Microsoft · Edge+1

Publicado 2016-11-08 · Atualizado 2018-10-12 · CVE-2016-7239

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge (affected versions not specified)

Description The issue allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors. An information disclosure vulnerability exists when the Microsoft browser XSS filter is abused to leak sensitive page information. An attacker who successfully exploited the issue could obtain sensitive information from certain web pages. To exploit the issue, an attacker would have to log on to an affected system.

Recommendations For Microsoft Internet Explorer versions 9 through 11, update to a version that includes the fix for this issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Information Disclosure

XSS

Enumeração de Fraquezas

CWE-200

CWE-79

Identificadores relacionados

BDU:2016-02360

CVE-2016-7239

Produtos afetados

Edge

Internet Explorer

Referências · 11

• http://technet.microsoft.com/security/bulletin/MS16-129 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7239 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-142 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7239 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-02360 · Nota de Segurança
• http://securityfocus.com/bid/94059 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129 · Aviso do Fabricante
• http://technet.microsoft.com/library/security/MS16-142 · Nota
• http://securitytracker.com/id/1037245 · Nota
• https://osv.dev/vulnerability/CVE-2016-7239 · Aviso do Fabricante
• http://technet.microsoft.com/security/bulletin/MS16-142 · Nota