Description
Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."
References
- 92827 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-16-506/
- MS16-104 vendor-advisory
- 1036788 vdb-entry