PT-2016-2975 · Microsoft · Chakra Javascript Engine+2

Published 2016-11-08 · Updated 2018-10-12 · CVE-2016-7199

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Microsoft Edge (affected versions not specified)

Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site. This is due to improper handling of objects in memory by the affected Microsoft browsers. An attacker who successfully exploits this issue could obtain browser window state from a different domain. For an attack to be successful, an attacker must persuade a user to open a malicious website from a secure website. The vulnerability is also caused by a buffer overflow in the Chakra JavaScript engine, which can allow a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For Microsoft Internet Explorer versions 9 through 11, consider applying security updates or patches to fix the improper handling of objects in memory. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of exploitation.

Buffer Overflow

Information Disclosure

Weakness Enumeration

CWE-119

CWE-200

Related Identifiers

BDU:2016-02406

CVE-2016-7199

Affected Products

Chakra Javascript Engine

Edge

Internet Explorer

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-142 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7199 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7199 · Security Note
• https://bdu.fstec.ru/vul/2016-02406 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7199 · Vendor Advisory
• http://technet.microsoft.com/security/bulletin/MS16-129 · Note
• http://securityfocus.com/bid/94057 · Note
• http://securityfocus.com/bid/93968 · Note
• http://technet.microsoft.com/library/security/MS16-142 · Note
• http://technet.microsoft.com/library/security/MS16-129 · Note
• http://securitytracker.com/id/1037245 · Note