PT-2016-1393 · Microsoft · Edge+1

Published 2016-03-08 · Updated 2018-10-12 · CVE-2016-0102

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified) Microsoft Edge (affected versions not specified)

Description The issue is caused by improper memory object access, which can lead to memory corruption. This allows a remote attacker to execute arbitrary code in the context of the current user or cause a denial of service. If the current user has administrative rights, the attacker could gain control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Internet Explorer, update to a version that properly accesses objects in memory to prevent exploitation. For Microsoft Edge, update to a version that properly accesses objects in memory to prevent exploitation. As a temporary workaround, consider restricting access to sensitive data and limiting user privileges to minimize the risk of exploitation.

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2016-00692

CVE-2016-0102

Affected Products

Edge

Internet Explorer

References · 13

• https://bdu.fstec.ru/vul/2016-00692 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-0102 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0102 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-024 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-023 · Vendor Advisory
• http://securitytracker.com/id/1035203 · Note
• http://technet.microsoft.com/security/bulletin/MS16-023 · Note
• http://technet.microsoft.com/library/security/ms16-023 · Note
• http://technet.microsoft.com/security/bulletin/MS16-024 · Note
• http://securityfocus.com/bid/84018 · Note
• http://technet.microsoft.com/library/security/ms16-024 · Note
• http://securitytracker.com/id/1035204 · Note