QwikSec

Security Database

CVE

CWE

Training

CVE-2016-3321

Published: Aug 9, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_MS

vdb-entry

x_refsource_SECTRACK

https://www.securify.nl/advisory/SFY20160301/internet_explorer_iframe_sandbox_local_file_name_disclosure_vulnerability.html

x_refsource_MISC

20160809 Internet Explorer iframe sandbox local file name disclosure vulnerability

mailing-list

x_refsource_FULLDISC

20160809 Internet Explorer iframe sandbox local file name disclosure vulnerability

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.