CVE-2016-3297
HighSummary
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Risk Assessment
This vulnerability can lead to serious consequences, such as system takeover or disruption of service, posing a threat to the organization's security.
Recommendation
It is recommended to update browsers to the latest versions and implement additional security measures, such as content filtering and network traffic monitoring.
Other vulnerabilities in Microsoft Internet Explorer 9-11, Microsoft Edge
See all- CVE-2016-7279High
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
- CVE-2016-7202High
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7198High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-7195.
- CVE-2016-7195High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3382High
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3293High
Microsoft Internet Explorer versions 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2016-3264High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2016-0192High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
- CVE-2016-0154High
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
- CVE-2016-0111High
The vulnerability in Microsoft Internet Explorer 9-11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Original NVD description (English source)
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."