Information Disclosure in Microsoft Internet Explorer - CVE-2016-3329

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists when Internet Explorer incorrectly handles web page content. A remote attacker can create a specially crafted web page, trick a victim to open that page in browser and determine presence of specific files on victim’s computer.

Successful exploitation of this vulnerability my allow an attacker to obtain potentially sensitive information.

Affected software

How to mitigate CVE-2016-3329

External References

• https://technet.microsoft.com/en-us/library/security/ms16-095.aspx
• https://technet.microsoft.com/en-us/library/security/ms16-096.aspx

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Internet Explorer and Edge
• Microsoft Browser Information Disclosure Vulnerability
• Cumulative Security Update for Internet Explorer