CVE-2016-3205
HighSummary
The JScript 5.8 and VBScript 5.7 and 5.8 engines in Internet Explorer 9 through 11 and other Microsoft products allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system or disrupt its operation, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of Internet Explorer and apply the relevant security patches provided by Microsoft.
Other vulnerabilities in JScript 5.8, VBScript 5.7, VBScript 5.8, Internet Explorer 9-11
Original NVD description (English source)
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3206 and CVE-2016-3207.