Microsoft Internet Explorer CVE-2016-0189 Scripting Engine Remote Memory Corruption Vulnerability



Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.

Internet Explorer 9, 10, and 11 are vulnerable.

Information

Bugtraq ID: 90012
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2016-0189

Remote: Yes
Local: No
Published: May 10 2016 12:00AM
Updated: Sep 28 2017 05:00PM
Credit: Microsoft
Vulnerable: Microsoft VBScript 5.8
+ Microsoft Internet Explorer 9
+ Microsoft Internet Explorer 9
+ Microsoft Internet Explorer 8
+ Microsoft Internet Explorer 8
+ Microsoft Internet Explorer 11
+ Microsoft Internet Explorer 11
+ Microsoft Internet Explorer 10
+ Microsoft Internet Explorer 10
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
Microsoft VBScript 5.7
+ Microsoft Internet Explorer 7.0
+ Microsoft Internet Explorer 7.0
+ Microsoft Windows Server 2008 for 32-bit Systems SP2
+ Microsoft Windows Server 2008 for Itanium-based Systems SP2
+ Microsoft Windows Server 2008 for x64-based Systems SP2
+ Microsoft Windows Vista Service Pack 2 0
+ Microsoft Windows Vista x64 Edition Service Pack 2 0
Microsoft JScript 5.8
+ Microsoft Internet Explorer 9
+ Microsoft Internet Explorer 8
+ Microsoft Internet Explorer 11
+ Microsoft Internet Explorer 10
+ Microsoft Windows 2000 Advanced Server SP4
+ Microsoft Windows 2000 Advanced Server SP4
+ Microsoft Windows 2000 Advanced Server SP4
+ Microsoft Windows 2000 Advanced Server SP3
+ Microsoft Windows 2000 Advanced Server SP3
+ Microsoft Windows 2000 Advanced Server SP3
+ Microsoft Windows 2000 Advanced Server SP2
+ Microsoft Windows 2000 Advanced Server SP2
+ Microsoft Windows 2000 Advanced Server SP2
+ Microsoft Windows 2000 Advanced Server SP1
+ Microsoft Windows 2000 Advanced Server SP1
+ Microsoft Windows 2000 Advanced Server SP1
+ Microsoft Windows 2000 Advanced Server
+ Microsoft Windows 2000 Advanced Server
+ Microsoft Windows 2000 Advanced Server
+ Microsoft Windows 2000 Datacenter Server SP4
+ Microsoft Windows 2000 Datacenter Server SP4
+ Microsoft Windows 2000 Datacenter Server SP4
+ Microsoft Windows 2000 Datacenter Server SP3
+ Microsoft Windows 2000 Datacenter Server SP3
+ Microsoft Windows 2000 Datacenter Server SP3
+ Microsoft Windows 2000 Datacenter Server SP2
+ Microsoft Windows 2000 Datacenter Server SP2
+ Microsoft Windows 2000 Datacenter Server SP2
+ Microsoft Windows 2000 Datacenter Server SP1
+ Microsoft Windows 2000 Datacenter Server SP1
+ Microsoft Windows 2000 Datacenter Server SP1
+ Microsoft Windows 2000 Datacenter Server
+ Microsoft Windows 2000 Datacenter Server
+ Microsoft Windows 2000 Datacenter Server
+ Microsoft Windows 2000 Professional SP4
+ Microsoft Windows 2000 Professional SP4
+ Microsoft Windows 2000 Professional SP4
+ Microsoft Windows 2000 Professional SP3
+ Microsoft Windows 2000 Professional SP3
+ Microsoft Windows 2000 Professional SP3
+ Microsoft Windows 2000 Professional SP2
+ Microsoft Windows 2000 Professional SP2
+ Microsoft Windows 2000 Professional SP2
+ Microsoft Windows 2000 Professional SP1
+ Microsoft Windows 2000 Professional SP1
+ Microsoft Windows 2000 Professional SP1
+ Microsoft Windows 2000 Professional
+ Microsoft Windows 2000 Professional
+ Microsoft Windows 2000 Professional
+ Microsoft Windows 2000 Server SP4
+ Microsoft Windows 2000 Server SP4
+ Microsoft Windows 2000 Server SP4
+ Microsoft Windows 2000 Server SP3
+ Microsoft Windows 2000 Server SP3
+ Microsoft Windows 2000 Server SP3
+ Microsoft Windows 2000 Server SP2
+ Microsoft Windows 2000 Server SP2
+ Microsoft Windows 2000 Server SP2
+ Microsoft Windows 2000 Server SP1
+ Microsoft Windows 2000 Server SP1
+ Microsoft Windows 2000 Server SP1
+ Microsoft Windows 2000 Server
+ Microsoft Windows 2000 Server
+ Microsoft Windows 2000 Server
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows Server 2003 SP2
+ Microsoft Windows Server 2003 SP2
+ Microsoft Windows Server 2003 SP2
+ Microsoft Windows Server 2003 SP1
+ Microsoft Windows Server 2003 SP1
+ Microsoft Windows Server 2003 SP1
+ Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition SP1
+ Microsoft Windows Server 2003 Datacenter Edition SP1
+ Microsoft Windows Server 2003 Datacenter Edition SP1
+ Microsoft Windows Server 2003 Datacenter Edition
+ Microsoft Windows Server 2003 Datacenter Edition
+ Microsoft Windows Server 2003 Datacenter Edition
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
+ Microsoft Windows Server 2003 Datacenter Edition Itanium 0
+ Microsoft Windows Server 2003 Datacenter Edition Itanium 0
+ Microsoft Windows Server 2003 Datacenter Edition Itanium 0
+ Microsoft Windows Server 2003 Datacenter x64 Edition SP2
+ Microsoft Windows Server 2003 Datacenter x64 Edition SP2
+ Microsoft Windows Server 2003 Datacenter x64 Edition SP2
+ Microsoft Windows Server 2003 Datacenter x64 Edition
+ Microsoft Windows Server 2003 Datacenter x64 Edition
+ Microsoft Windows Server 2003 Datacenter x64 Edition
+ Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition SP1
+ Microsoft Windows Server 2003 Enterprise Edition SP1
+ Microsoft Windows Server 2003 Enterprise Edition SP1
+ Microsoft Windows Server 2003 Enterprise Edition
+ Microsoft Windows Server 2003 Enterprise Edition
+ Microsoft Windows Server 2003 Enterprise Edition
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
+ Microsoft Windows Server 2003 Enterprise Edition Itanium 0
+ Microsoft Windows Server 2003 Enterprise Edition Itanium 0
+ Microsoft Windows Server 2003 Enterprise Edition Itanium 0
+ Microsoft Windows Server 2003 Enterprise x64 Edition SP2
+ Microsoft Windows Server 2003 Enterprise x64 Edition SP2
+ Microsoft Windows Server 2003 Enterprise x64 Edition SP2
+ Microsoft Windows Server 2003 Enterprise x64 Edition
+ Microsoft Windows Server 2003 Enterprise x64 Edition
+ Microsoft Windows Server 2003 Enterprise x64 Edition
+ Microsoft Windows Server 2003 Itanium SP2
+ Microsoft Windows Server 2003 Itanium SP2
+ Microsoft Windows Server 2003 Itanium SP2
+ Microsoft Windows Server 2003 Itanium SP1
+ Microsoft Windows Server 2003 Itanium SP1
+ Microsoft Windows Server 2003 Itanium SP1
+ Microsoft Windows Server 2003 Itanium 0
+ Microsoft Windows Server 2003 Itanium 0
+ Microsoft Windows Server 2003 Itanium 0
+ Microsoft Windows Server 2003 Standard Edition SP2
+ Microsoft Windows Server 2003 Standard Edition SP2
+ Microsoft Windows Server 2003 Standard Edition SP2
+ Microsoft Windows Server 2003 Standard Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Standard Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Standard Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Standard Edition SP1
+ Microsoft Windows Server 2003 Standard Edition SP1
+ Microsoft Windows Server 2003 Standard Edition SP1
+ Microsoft Windows Server 2003 Standard Edition
+ Microsoft Windows Server 2003 Standard Edition
+ Microsoft Windows Server 2003 Standard Edition
+ Microsoft Windows Server 2003 Standard x64 Edition
+ Microsoft Windows Server 2003 Standard x64 Edition
+ Microsoft Windows Server 2003 Standard x64 Edition
+ Microsoft Windows Server 2003 Web Edition SP2
+ Microsoft Windows Server 2003 Web Edition SP2
+ Microsoft Windows Server 2003 Web Edition SP2
+ Microsoft Windows Server 2003 Web Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Web Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Web Edition SP1 Beta 1
+ Microsoft Windows Server 2003 Web Edition SP1
+ Microsoft Windows Server 2003 Web Edition SP1
+ Microsoft Windows Server 2003 Web Edition SP1
+ Microsoft Windows Server 2003 Web Edition
+ Microsoft Windows Server 2003 Web Edition
+ Microsoft Windows Server 2003 Web Edition
+ Microsoft Windows Server 2003 x64 SP2
+ Microsoft Windows Server 2003 x64 SP2
+ Microsoft Windows Server 2003 x64 SP2
+ Microsoft Windows Server 2003 x64 SP1
+ Microsoft Windows Server 2003 x64 SP1
+ Microsoft Windows Server 2003 x64 SP1
+ Microsoft Windows Server 2008 R2 Datacenter SP1
+ Microsoft Windows Server 2008 R2 Datacenter SP1
+ Microsoft Windows Server 2008 R2 Itanium SP1
+ Microsoft Windows Server 2008 R2 Itanium SP1
+ Microsoft Windows Server 2008 R2 x64 SP1
+ Microsoft Windows Server 2008 R2 x64 SP1
+ Microsoft Windows XP 0
+ Microsoft Windows XP 0
+ Microsoft Windows XP 0
+ Microsoft Windows XP 64-bit Edition SP1
+ Microsoft Windows XP 64-bit Edition SP1
+ Microsoft Windows XP 64-bit Edition SP1
+ Microsoft Windows XP 64-bit Edition
+ Microsoft Windows XP 64-bit Edition
+ Microsoft Windows XP 64-bit Edition
+ Microsoft Windows XP 64-bit Edition Version 2003 SP1
+ Microsoft Windows XP 64-bit Edition Version 2003 SP1
+ Microsoft Windows XP 64-bit Edition Version 2003 SP1
+ Microsoft Windows XP 64-bit Edition Version 2003
+ Microsoft Windows XP 64-bit Edition Version 2003
+ Microsoft Windows XP 64-bit Edition Version 2003
+ Microsoft Windows XP Home SP2
+ Microsoft Windows XP Home SP2
+ Microsoft Windows XP Home SP2
+ Microsoft Windows XP Home SP1
+ Microsoft Windows XP Home SP1
+ Microsoft Windows XP Home SP1
+ Microsoft Windows XP Home
+ Microsoft Windows XP Home
+ Microsoft Windows XP Home
+ Microsoft Windows XP Media Center Edition SP2
+ Microsoft Windows XP Media Center Edition SP2
+ Microsoft Windows XP Media Center Edition SP2
+ Microsoft Windows XP Media Center Edition SP1
+ Microsoft Windows XP Media Center Edition SP1
+ Microsoft Windows XP Media Center Edition SP1
+ Microsoft Windows XP Media Center Edition
+ Microsoft Windows XP Media Center Edition
+ Microsoft Windows XP Media Center Edition
+ Microsoft Windows XP Professional SP2
+ Microsoft Windows XP Professional SP2
+ Microsoft Windows XP Professional SP2
+ Microsoft Windows XP Professional SP1
+ Microsoft Windows XP Professional SP1
+ Microsoft Windows XP Professional SP1
+ Microsoft Windows XP Professional
+ Microsoft Windows XP Professional
+ Microsoft Windows XP Professional
+ Microsoft Windows XP Professional x64 Edition SP2
+ Microsoft Windows XP Professional x64 Edition SP2
+ Microsoft Windows XP Professional x64 Edition SP2
+ Microsoft Windows XP Professional x64 Edition
+ Microsoft Windows XP Professional x64 Edition
+ Microsoft Windows XP Professional x64 Edition
+ Microsoft Windows XP Tablet PC Edition SP2
+ Microsoft Windows XP Tablet PC Edition SP2
+ Microsoft Windows XP Tablet PC Edition SP2
+ Microsoft Windows XP Tablet PC Edition SP1
+ Microsoft Windows XP Tablet PC Edition SP1
+ Microsoft Windows XP Tablet PC Edition SP1
+ Microsoft Windows XP Tablet PC Edition
+ Microsoft Windows XP Tablet PC Edition
+ Microsoft Windows XP Tablet PC Edition
Microsoft Internet Explorer 9
+ Microsoft Windows 7
+ Microsoft Windows 7
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for 32-bit Systems 0
+ Microsoft Windows 7 for 32-bit Systems 0
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 7 for x64-based Systems 0
+ Microsoft Windows 7 for x64-based Systems 0
+ Microsoft Windows 7 Home Premium - Sp1 X64
+ Microsoft Windows 7 Home Premium - Sp1 X64
+ Microsoft Windows 7 Home Premium - Sp1 X32
+ Microsoft Windows 7 Home Premium - Sp1 X32
+ Microsoft Windows Server 2008 R2
+ Microsoft Windows Server 2008 R2
+ Microsoft Windows Server 2008 for 32-bit Systems SP2
+ Microsoft Windows Server 2008 for 32-bit Systems SP2
+ Microsoft Windows Server 2008 for 32-bit Systems 0
+ Microsoft Windows Server 2008 for 32-bit Systems 0
+ Microsoft Windows Server 2008 for x64-based Systems SP2
+ Microsoft Windows Server 2008 for x64-based Systems SP2
+ Microsoft Windows Server 2008 for x64-based Systems 0
+ Microsoft Windows Server 2008 for x64-based Systems 0
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Vista SP2
+ Microsoft Windows Vista SP2
+ Microsoft Windows Vista SP1
+ Microsoft Windows Vista SP1
+ Microsoft Windows Vista x64 Edition SP2
+ Microsoft Windows Vista x64 Edition SP2
+ Microsoft Windows Vista x64 Edition SP1
+ Microsoft Windows Vista x64 Edition SP1
+ Microsoft Windows Vista x64 Edition 0
+ Microsoft Windows Vista x64 Edition 0
Microsoft Internet Explorer 11
+ Microsoft Windows 10 for 32-bit Systems 0
+ Microsoft Windows 10 for 32-bit Systems 0
+ Microsoft Windows 10 for 32-bit Systems 0
+ Microsoft Windows 10 for x64-based Systems 0
+ Microsoft Windows 10 for x64-based Systems 0
+ Microsoft Windows 10 for x64-based Systems 0
+ Microsoft Windows 10 version 1511 for 32-bit Systems 0
+ Microsoft Windows 10 version 1511 for 32-bit Systems 0
+ Microsoft Windows 10 version 1511 for 32-bit Systems 0
+ Microsoft Windows 10 version 1511 for x64-based Systems 0
+ Microsoft Windows 10 version 1511 for x64-based Systems 0
+ Microsoft Windows 10 version 1511 for x64-based Systems 0
+ Microsoft Windows 10 Version 1607 for 32-bit Systems 0
+ Microsoft Windows 10 Version 1607 for x64-based Systems 0
+ Microsoft Windows 10 version 1703 for 32-bit Systems 0
+ Microsoft Windows 10 version 1703 for x64-based Systems 0
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 8.1 for 32-bit Systems 0
+ Microsoft Windows 8.1 for 32-bit Systems 0
+ Microsoft Windows 8.1 for 32-bit Systems 0
+ Microsoft Windows 8.1 for x64-based Systems 0
+ Microsoft Windows 8.1 for x64-based Systems 0
+ Microsoft Windows 8.1 for x64-based Systems 0
+ Microsoft Windows Rt 8.1 -
+ Microsoft Windows Rt 8.1 -
+ Microsoft Windows Rt 8.1 -
+ Microsoft Windows Server 2016
+ Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2
+ Microsoft Windows Server 2008 R2 for Itanium-based Systems SP2
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Server 2012 R2 0
+ Microsoft Windows Server 2012 R2 0
+ Microsoft Windows Server 2012 R2 0
Microsoft Internet Explorer 10
+ Microsoft Windows 7 for 32-bit Systems SP1
+ Microsoft Windows 7 for x64-based Systems SP1
+ Microsoft Windows 8 for 32-bit Systems 0
+ Microsoft Windows 8 for x64-based Systems 0
+ Microsoft Windows RT 0
+ Microsoft Windows Server 2008 R2 for x64-based Systems SP1
+ Microsoft Windows Server 2012 0
+ Microsoft Windows Server 2012 0


Not Vulnerable:

Exploit


This vulnerability is being exploited as part of multiple exploit kits, including Disdain, Magnitude, Nebula, and Terror.


Related Posts