CVE-2016-0189

Scores

EPSS

0.913high91.3%

0%20%40%60%80%100%

Percentile: 91.3%

CVSS

7.5high3.x

0246810

CVSS Score: 7.5/10

All CVSS Scores

CVSS 3.x

7.5

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0

7.6

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a different vulnerability than CVE-2016-0187.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.

Learn more about Scaner-VS 7

Sources

msrcnvd

CWEs

CWE-787

Related Vulnerabilities

BDU:2021-05514

Exploits

Exploit ID: 40118

Source: exploitdb

URL: https://www.exploit-db.com/exploits/40118

Exploit ID: CVE-2016-0189

Source: github-poc

URL: https://github.com/theori-io/cve-2016-0189

Vulnerable Software (318)

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": ...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: jscript

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:jscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "c...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:jscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vbscript

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:jscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "c...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:jscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*",          "vulnerable": true        },        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.8:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: vbscript

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"  ...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:vbscript:5.7:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*"        },        {          "cpe23uri": "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB3154070

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Operating System: Windows

Identifier: KB4025331

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 6.3.9600.22676

Operating System: Windows 9600 build 22676

Identifier: KB5062597

Source: msrc

Type: Windows KB

Vendor: Microsoft

Product: Windows

Version: 6.3.9600.21668

Operating System: Windows 9600 build 21668

Identifier: KB5032249

Source: msrc

Russian Vulnerability Scanner Database

CVE-2016-0189

Scores

EPSS

CVSS

All CVSS Scores

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Authentication

Confidentiality Impact

Integrity Impact

Availability Impact

Description

Scaner-VS 7 — a modern vulnerability management solution

Sources

CWEs

Related Vulnerabilities

Exploits

Vulnerable Software (318)