CVE-2016-3382: Buffer Overflow
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3382?
CVE-2016-3382 has a severity rating of critical due to its potential for remote code execution and denial of service.
How do I fix CVE-2016-3382?
To fix CVE-2016-3382, ensure that your installation of Microsoft Internet Explorer or Microsoft Edge is updated to the latest version.
What software is affected by CVE-2016-3382?
CVE-2016-3382 affects Microsoft Internet Explorer versions 9, 10, and 11, as well as Microsoft Edge.
What types of attacks can exploit CVE-2016-3382?
CVE-2016-3382 can be exploited to execute arbitrary code or cause memory corruption leading to denial of service through crafted websites.
Is there a workaround for CVE-2016-3382?
While the best mitigation for CVE-2016-3382 is to update affected software, using alternative browsers can serve as a temporary workaround.