What is CVE-2016-3321?

CVE-2016-3321 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. Internet Explorer Information Disclosure Vulnerability

Which CVE IDs does CVE-2016-3321 cover?

CVE-2016-3321 covers the following CVE IDs: CVE-2016-3321. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2016-3321?

CVE-2016-3321 has a CVSS v3 base score of 2.6, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2016-3321?

CVE-2016-3321 affects 14 products, including: Internet Explorer 10 on Windows Server 2012; Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems; Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems; Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems; Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems; and others — see the full list on the advisory page.

CVE-2016-3321MediumCVSS 2.6

Internet Explorer Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

August 9, 2016

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2016-3321 →

📋 Description

An information disclosure vulnerability exists when Internet Explorer improperly handles page content, which could allow an attacker to detect the existence of specific files on the user's system. To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site. The security update addresses the vulnerability by helping to ensure that page content is properly validated in Internet Explorer.

🎯 Affected products14

Internet Explorer 10 on Windows Server 2012
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012 R2

✅ Remediation

KB3175443 (Security Update) KB3176492 (Security Update) KB3176493 (Security Update) KB3176495 (Security Update)

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products14

✅ Remediation

🔗 References (9)