HTTP: Microsoft Internet Explorer CVE-2016-3205 Arbitrary Code Execution
This signature detects an attempt to exploit a known vulnerability against Microsoft Internet Explorer. Successful exploitation could allow an attacker to execute arbitrary code.
Extended Description
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3206 and CVE-2016-3207.
References
CVE: CVE-2016-3205
Short Name
HTTP:STC:IE:CVE-2016-3205-CE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2016-3205 Code Execution Explorer Internet Microsoft
Release Date
06/14/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3415
False Positive
Unknown
CVSS Score
7.6