Lucene search

K
symantecSymantec Security ResponseSMNTC-92291
HistoryAug 09, 2016 - 12:00 a.m.

Microsoft Internet Explorer CVE-2016-3321 Local Information Disclosure Vulnerability

2016-08-0900:00:00
Symantec Security Response
www.symantec.com
14

0.001 Low

EPSS

Percentile

29.0%

Description

Microsoft Internet Explorer is prone to a local information-disclosure vulnerability. An authenticated attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable.

Technologies Affected

  • Microsoft Internet Explorer 10
  • Microsoft Internet Explorer 11

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Allow only trusted individuals to have user accounts and local access to the resources.

Updates are available. Please see the references or vendor advisory for more information.

0.001 Low

EPSS

Percentile

29.0%