PT-2016-1993 · Microsoft · Windows+2

Published 2016-05-10 · Updated 2018-10-12 · CVE-2016-0188

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 Windows (affected versions not specified)

Description The issue is related to a security feature bypass in the User Mode Code Integrity (UMCI) implementation of Device Guard in Microsoft Internet Explorer 11. This allows remote attackers to bypass a code-signing protection mechanism. Additionally, there is a component in the Windows operating system, specifically the Volume Manager Driver, that is vulnerable due to a lack of user validation for the RemoteFX RDP USB function, potentially allowing a local attacker to read arbitrary files from the disk.

Recommendations For Microsoft Internet Explorer 11, update the User Mode Code Integrity (UMCI) component to properly validate code integrity. For Windows, consider restricting access to the RemoteFX RDP USB function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability in Windows.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2016-01327

CVE-2016-0188

Affected Products

Internet Explorer

Internet Explorer 11

Windows

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2016-0188 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0188 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0188 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01327 · Security Note
• http://technet.microsoft.com/library/security/ms16-051 · Note
• http://technet.microsoft.com/security/bulletin/MS16-051 · Note
• http://securitytracker.com/id/1035820 · Note
• http://securityfocus.com/bid/90003 · Note