Detections
Analytics

MS16-009: Cumulative Security Update for Internet Explorer (3134220)

high Nessus Plugin ID 88642

Language:

Synopsis

The remote host has a web browser installed that is affected by multiple vulnerabilities.

Description

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3134220. It is, therefore, affected by multiple vulnerabilities :

 - A remote code execution vulnerability exists due to improper validation of input when loading dynamic link library (DLL) files. A local attacker can exploit this, via a specially crafted application, to execute arbitrary code. (CVE-2016-0041)

 - An information disclosure vulnerability exists in the Hyperlink Object Library due to improper handling of objects in memory. A remote attacker can exploit this by convincing a user to click a link in an email or Office file, resulting in the disclosure of memory contents.
 (CVE-2016-0059)

 - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user. (CVE-2016-0060, CVE-2016-0061, CVE-2016-0062, CVE-2016-0063, CVE-2016-0064, CVE-2016-0067, CVE-2016-0071, CVE-2016-0072)

 - A spoofing vulnerability exists due to improper parsing of HTTP responses. An unauthenticated, remote attacker can exploit this, via a specially crafted URL, to redirect a user to a malicious website. (CVE-2016-0077)

 - Multiple elevation of privilege vulnerabilities exist due to improper enforcement of cross-domain policies. An unauthenticated, remote attacker can exploit this by convincing a user to visit a specially crafted website, resulting in an elevation of privilege. (CVE-2016-0068, CVE-2016-0069)

Solution

Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2016/ms16-009

Plugin Details

Severity: High

ID: 88642

File Name: smb_nt_ms16-009.nasl

Version: 1.16

Type: local

Agent: windows

Published: 2/9/2016

Updated: 11/20/2019

Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2016-0072

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.2

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:ie, cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/9/2016

Vulnerability Publication Date: 2/9/2016

Exploitable With

Core Impact

Metasploit (Office OLE Multiple DLL Side Loading Vulnerabilities)

Reference Information

CVE: CVE-2016-0041, CVE-2016-0059, CVE-2016-0060, CVE-2016-0061, CVE-2016-0062, CVE-2016-0063, CVE-2016-0064, CVE-2016-0067, CVE-2016-0068, CVE-2016-0069, CVE-2016-0071, CVE-2016-0072, CVE-2016-0077

BID: 82505, 82629, 82650, 82653, 82658, 82659, 82661, 82662, 82663, 82664, 82665, 82669, 82671

MSFT: MS16-009

MSKB: 3134814, 3135173, 3135174, 3141092