Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."

The version of Microsoft Edge installed on the remote host is missing Cumulative Security Update 3134225. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory. An attacker     can exploit these vulnerabilities by convincing a user     to visit a specially crafted website, resulting in     execution of arbitrary code in the context of the     current user. (CVE-2016-0060, CVE-2016-0061,     CVE-2016-0062, CVE-2016-0084)

  - A spoofing vulnerability exists due to improper parsing     of HTTP responses. An unauthenticated, remote attacker     can exploit this, via a specially crafted URL, to     redirect a user to a malicious website. (CVE-2016-0077)

  - An information disclosure vulnerability exists due to     improper handling of exceptions when dispatching certain     window messages. An unauthenticated, remote attacker can     exploit this, via a specially crafted website, to bypass     the Address Space Layout Randomization (ASLR) feature,     resulting in the ability to predict memory offsets in a     call stack. (CVE-2016-0080)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3134220. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists due to     improper validation of input when loading dynamic link     library (DLL) files. A local attacker can exploit this,     via a specially crafted application, to execute     arbitrary code. (CVE-2016-0041)

  - An information disclosure vulnerability exists in the     Hyperlink Object Library due to improper handling of     objects in memory. A remote attacker can exploit this by     convincing a user to click a link in an email or Office     file, resulting in the disclosure of memory contents.
    (CVE-2016-0059)

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory. A remote     attacker can exploit these vulnerabilities by convincing     a user to visit a specially crafted website, resulting     in the execution of arbitrary code in the context of the     current user. (CVE-2016-0060, CVE-2016-0061,     CVE-2016-0062, CVE-2016-0063, CVE-2016-0064,     CVE-2016-0067, CVE-2016-0071, CVE-2016-0072)

  - A spoofing vulnerability exists due to improper parsing     of HTTP responses. An unauthenticated, remote attacker     can exploit this, via a specially crafted URL, to     redirect a user to a malicious website. (CVE-2016-0077)

  - Multiple elevation of privilege vulnerabilities exist     due to improper enforcement of cross-domain policies. An     unauthenticated, remote attacker can exploit this by     convincing a user to visit a specially crafted website,     resulting in an elevation of privilege. (CVE-2016-0068,     CVE-2016-0069)

ID	Name	Product	Family	Severity
88643	MS16-011: Cumulative Security Update for Microsoft Edge (3134225)	Nessus	Windows : Microsoft Bulletins	high
88642	MS16-009: Cumulative Security Update for Internet Explorer (3134220)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2016-0077

medium

Tenable Plugins

high

high