MS16-009: Cumulative Security Update for Internet Explorer (3134220)

High Nessus Plugin ID 88642

Synopsis

The remote host has a web browser installed that is affected by multiple vulnerabilities.

Description

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3134220. It is, therefore, affected by multiple vulnerabilities :

- A remote code execution vulnerability exists due to improper validation of input when loading dynamic link library (DLL) files. A local attacker can exploit this, via a specially crafted application, to execute arbitrary code. (CVE-2016-0041)

- An information disclosure vulnerability exists in the Hyperlink Object Library due to improper handling of objects in memory. A remote attacker can exploit this by convincing a user to click a link in an email or Office file, resulting in the disclosure of memory contents.
(CVE-2016-0059)

- Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user. (CVE-2016-0060, CVE-2016-0061, CVE-2016-0062, CVE-2016-0063, CVE-2016-0064, CVE-2016-0067, CVE-2016-0071, CVE-2016-0072)

- A spoofing vulnerability exists due to improper parsing of HTTP responses. An unauthenticated, remote attacker can exploit this, via a specially crafted URL, to redirect a user to a malicious website. (CVE-2016-0077)

- Multiple elevation of privilege vulnerabilities exist due to improper enforcement of cross-domain policies. An unauthenticated, remote attacker can exploit this by convincing a user to visit a specially crafted website, resulting in an elevation of privilege. (CVE-2016-0068, CVE-2016-0069)

Solution

Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 2012, 8.1, RT 8.1, 2012 R2, and 10.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2016/ms16-009

Plugin Details

Severity: High

ID: 88642

File Name: smb_nt_ms16-009.nasl

Version: 1.16

Type: local

Agent: windows

Published: 2016/02/09

Updated: 2019/11/20

Dependencies: 13855, 57033

Risk Information

Risk Factor: High

CVSS Score Source: CVE-2016-0072

CVSS v2.0

Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSS v3.0

Base Score: 8.8

Temporal Score: 8.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:ie

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2016/02/09

Vulnerability Publication Date: 2016/02/09

Exploitable With

Core Impact

Metasploit (Office OLE Multiple DLL Side Loading Vulnerabilities)

Reference Information

CVE: CVE-2016-0041, CVE-2016-0059, CVE-2016-0060, CVE-2016-0061, CVE-2016-0062, CVE-2016-0063, CVE-2016-0064, CVE-2016-0067, CVE-2016-0068, CVE-2016-0069, CVE-2016-0071, CVE-2016-0072, CVE-2016-0077

BID: 82505, 82629, 82650, 82653, 82658, 82659, 82661, 82662, 82663, 82664, 82665, 82669, 82671

MSFT: MS16-009

MSKB: 3134814, 3141092, 3135174, 3135173