Vulnerabilities > CVE-2016-0189 - Out-of-bounds Write vulnerability in Microsoft Internet Explorer, Jscript and Vbscript

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
high complexity
microsoft
CWE-787
nessus
exploit available
metasploit
NVD
Published: 2016-05-11
Updated: 2024-07-09

Summary

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.

Vulnerable Configurations

Part Description Count
Application
Microsoft
6
OS
Microsoft
11

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionInternet Explorer 11 (on Windows 10) - VBScript Memory Corruption Proof-of-Concept Exploit (MS16-051). CVE-2016-0189. Local exploit for Windows platform
fileexploits/windows/local/40118.txt
idEDB-ID:40118
last seen2016-07-18
modified2016-06-22
platformwindows
port
published2016-06-22
reporterBrian Pak
sourcehttps://www.exploit-db.com/download/40118/
titleInternet Explorer 11 (on Windows 10) - VBScript Memory Corruption Proof-of-Concept Exploit (MS16-051)
typelocal

Metasploit

descriptionThis module exploits the memory corruption vulnerability (CVE-2016-0189) present in the VBScript engine of Internet Explorer 11.
idMSF:EXPLOIT/WINDOWS/BROWSER/MS16_051_VBSCRIPT
last seen2020-06-09
modified2017-07-24
published2016-08-01
referenceshttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0189
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/windows/browser/ms16_051_vbscript.rb
titleInternet Explorer 11 VBScript Engine Memory Corruption

Msbulletin

  • bulletin_idMS16-051
    bulletin_url
    date2016-05-10T00:00:00
    impactRemote Code Execution
    knowledgebase_id3155533
    knowledgebase_url
    severityCritical
    titleCumulative Security Update for Internet Explorer
  • bulletin_idMS16-053
    bulletin_url
    date2016-05-10T00:00:00
    impactRemote Code Execution
    knowledgebase_id3156764
    knowledgebase_url
    severityCritical
    titleSecurity Update for JScript and VBScript

Nessus

  • NASL familyWindows : Microsoft Bulletins
    NASL idSMB_NT_MS16-051.NASL
    descriptionThe version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3155533. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.
    last seen2020-06-01
    modified2020-06-02
    plugin id91001
    published2016-05-10
    reporterThis script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/91001
    titleMS16-051: Cumulative Security Update for Internet Explorer (3155533)
  • NASL familyWindows : Microsoft Bulletins
    NASL idSMB_NT_MS16-053.NASL
    descriptionThe remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities in the JScript and VBScript engines due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website or open a Microsoft Office document containing an embedded ActiveX control, resulting in the execution of arbitrary code in the context of the current user.
    last seen2020-06-01
    modified2020-06-02
    plugin id91003
    published2016-05-10
    reporterThis script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/91003
    titleMS16-053: Cumulative Security Update for JScript and VBScript (3156764)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/138193/ms16_051_vbscript.rb.txt
idPACKETSTORM:138193
last seen2016-12-05
published2016-08-06
reporterTheori
sourcehttps://packetstormsecurity.com/files/138193/Internet-Explorer-11-VBScript-Engine-Memory-Corruption.html
titleInternet Explorer 11 VBScript Engine Memory Corruption

Seebug

bulletinFamilyexploit
descriptionNo description provided by source.
idSSV:92247
last seen2017-11-19
modified2016-08-08
published2016-08-08
sourcehttps://www.seebug.org/vuldb/ssvid-92247
titleInternet Explorer 11 VBScript engine memory corruption vulnerability

Related news

References