CVE-2016-3325

🗓️ 14 Sep 2016 10:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 145 Views🌐 WEB

Microsoft IE 11 & Edge allow information disclosure via crafted website

Reporter	Title	Published	Views	Family All 22
0day.today	Microsoft Internet Explorer WININET.dll - CHttpHeaderParser::ParseStatusLine Out-of-Bounds Read	11 Nov 201600:00	–	zdt
BDU FSTEC	Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing intruders to obtain confidential information	22 Sep 201600:00	–	bdu_fstec
Circl	CVE-2016-3325	10 Nov 201600:00	–	circl
CNVD	Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-07590)	14 Sep 201600:00	–	cnvd
Check Point Advisories	Microsoft Browser Information Disclosure (MS16-105 : CVE-2016-3325)	13 Sep 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-3325	14 Sep 201610:00	–	cvelist
Microsoft KB	MS16-104: Cumulative security update for Internet Explorer: September 13, 2016	13 Sep 201600:00	–	mskb
Microsoft KB	MS16-105: Cumulative security update for Microsoft Edge: September 13, 2016	13 Sep 201600:00	–	mskb
Microsoft KB	Cumulative update for Windows 10: September 13, 2016	13 Sep 201607:00	–	mskb
Microsoft KB	Cumulative update for Windows 10 Version 1511: September 13, 2016	13 Sep 201607:00	–	mskb

NVD

Node

Source	Link
securitytracker	www.securitytracker.com/id/1036788
securityfocus	www.securityfocus.com/bid/92832
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
securitytracker	www.securitytracker.com/id/1036789
exploit-db	www.exploit-db.com/exploits/40747/

Parameter	Position	Path	Description	CWE
timestamp	path	Response.http	Information disclosure via HTTP 100 handling in WININET/Edge/IE when processing 100 responses, demonstrated by the PoC using Response.http?<timestamp> to trigger out-of-bounds reads.	CWE-200

17 Jun 2026 00:45Current

4.7Medium risk

Vulners AI Score4.7

CVSS 22.6

CVSS 33.1

EPSS0.53914