CVE-2016-3247
HIGHMicrosoft Edge and Internet Explorer 11 - Remote Code Execution or Denial of Service via Memory Corruption
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-3247. PoCs published by Skylined.
AI-analyzed exploit summary This exploit demonstrates an integer underflow in Microsoft Edge's CTextExtractor::GetBlockText, leading to an out-of-bounds read. The PoC uses a heap spray technique to allocate memory at a specific offset to prevent a crash, proving the vulnerability's exploitability.
Description
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
Exploits (1)
This exploit demonstrates an integer underflow in Microsoft Edge's CTextExtractor::GetBlockText, leading to an out-of-bounds read. The PoC uses a heap spray technique to allocate memory at a specific offset to prevent a crash, proving the vulnerability's exploitability.
References (9)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H