Information Disclosure in Microsoft Internet Explorer - CVE-2016-3329

Detailed vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists when Internet Explorer incorrectly handles web page content. A remote attacker can create a specially crafted web page, trick a victim to open that page in browser and determine presence of specific files on victim’s computer.

Successful exploitation of this vulnerability my allow an attacker to obtain potentially sensitive information.

How to mitigate CVE-2016-3329

Sources

• https://technet.microsoft.com/en-us/library/security/ms16-095.aspx
• https://technet.microsoft.com/en-us/library/security/ms16-096.aspx