CVE Database
/

CVE-2016-3213

Back to search

CVE-2016-3213

Published: Jun 16, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanism, which allows remote attackers to gain privileges via NetBIOS name responses, aka "WPAD Elevation of Privilege Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS16-077
vendor-advisory
x_refsource_MS
MS16-063
vendor-advisory
x_refsource_MS
1036096
vdb-entry
x_refsource_SECTRACK
1036104
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now