HTTP: Microsoft Internet Explorer CVE-2016-3276 Code Execution
This signature detects an attempt to exploit an Use-After-Free Vulnerability in Microsoft Internet Explorer. Successful exploitation could allow an attacker to execute arbitrary code into the application's context.
Extended Description
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."
Affected Products
Microsoft internet_explorer
References
CVE: CVE-2016-3276
Short Name
HTTP:STC:IE:CVE-2016-3276-CE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-3276 Code Execution Explorer Internet Microsoft
Release Date
07/12/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3718
False Positive
Unknown
Vendors
Microsoft
CVSS Score
2.6