The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet
    Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial
    of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption
    Vulnerability." (CVE-2016-3202)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3163656. It is, therefore, affected by multiple vulnerabilities :

  - A security feature bypass vulnerability exists due to a     failure to properly validate specially crafted     documents. An unauthenticated, remote attacker can     exploit this vulnerability by convincing a user to load     a page or visit a website containing malicious content,     allowing the attacker to bypass the Edge Content     Security Policy (CSP). (CVE-2016-3198)

  - Multiple remote code execution vulnerabilities exist in     the Chakra JavaScript engine due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit these vulnerabilities by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document that hosts the Edge     rendering engine, resulting in the execution of     arbitrary code in the context of the current user.
    (CVE-2016-3199, CVE-2016-3202, CVE-2016-3214,     CVE-2016-3222)

  - Multiple information disclosure vulnerabilities exist     due to improper parsing of .pdf files. An     unauthenticated, remote attacker can exploit these     vulnerabilities by convincing a user to open a specially     crafted .pdf file, resulting in the disclosure of     sensitive information in the context of the current     user. (CVE-2016-3201, CVE-2016-3215)

  - A remote code execution vulnerability exists due to     improper parsing of .pdf files. An unauthenticated,     remote attacker can exploit this vulnerability by     convincing a user to open a specially crafted .pdf file,     resulting in the execution of arbitrary code in the     context of the current user. (CVE-2016-3203)

Note that CVE-2016-3214, CVE-2016-3215, and CVE-2016-3222 only affect Windows 10 version 1511.

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3163649. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

ID	Name	Product	Family	Type	Severity
432793	SCA: security update for Microsoft.ChakraCore (GHSA-ww6f-76ff-phhj)	Tenable Cloud Security	SCA Checks	Local	high
432793	SCA: security update for Microsoft.ChakraCore (GHSA-ww6f-76ff-phhj)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
91597	MS16-068: Cumulative Security Update for Microsoft Edge (3163656)	Nessus	Windows : Microsoft Bulletins	Local	high
91596	MS16-063: Cumulative Security Update for Internet Explorer (3163649)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2016-3202

high

Tenable Plugins

high

high

high

high