Main
Vulnerability Database
Exploits
ID:424 - Exploit for Privilege Escalation in Microsoft Internet Explorer and Microsoft Edge - CVE-2016-3387
ID:424 - Exploit for Privilege Escalation in Microsoft Internet Explorer and Microsoft Edge - CVE-2016-3387
Published: March 18, 2020
Vulnerability identifier: #VU928
Vulnerability risk: Low
CVE-ID: CVE-2016-3387
CWE-ID: CWE-46
Exploitation vector: Remote access
Vulnerable software:
Microsoft Internet Explorer
Microsoft Edge
Microsoft Internet Explorer
Microsoft Edge
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain elevated privileges.
The weakness exists due to improper defense of private namespace by the browser. A remote attacker can create a specially crafted content, trick the victim into downloading it, gain privileged permissions to the namespace directory on the system.
Successful exploitation of the vulnerability will result in privilege escalation on the vulnerable system.
The weakness exists due to improper defense of private namespace by the browser. A remote attacker can create a specially crafted content, trick the victim into downloading it, gain privileged permissions to the namespace directory on the system.
Successful exploitation of the vulnerability will result in privilege escalation on the vulnerable system.
Remediation
Install update from vendor's website.