HTTP: Microsoft Edge CVE-2016-3215 Code Execution
This signature detects an attempt to exploit a known vulnerability against Microsoft Edge. Successful exploitation of this issue could allow an attacker to leak sensitive information or execute code under the context of the current process.
Extended Description
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201.
Affected Products
Microsoft windows_8.1
References
CVE: CVE-2016-3215
Short Name
HTTP:STC:IE:CVE-2016-3215-CE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-3215 Code Edge Execution Microsoft
Release Date
06/14/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
4.3