CVE-2016-3207 in Internet Explorer

Summary

The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3205 and CVE-2016-3206.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

03/15/2016

Disclosure

06/15/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
87967	Microsoft Internet Explorer Scripting memory corruption	119	Not defined	Official fix	CVE-2016-3207
87935	Microsoft Windows VBScript/JScript input validation	20	Not defined	Official fix	CVE-2016-3207

Sources

• MITRE
• NVD
• CVE Details