Intrusion PreventionMS.IE.Enhanced.Protected.Mode.Sandbox.Bypass
Description
This indicates an attack attempt to exploit a Sandbox Bypass vulnerability in Microsoft Internet Explorer.
The vulnerability is due to an error when the vulnerable software attempts to handles maliciously crafted web page. An attacker can exploit this by tricking a user into visiting a malicious webpage and escape sandbox mode within the context of the process.
Affected Products
Internet Explorer 10
Internet Explorer 11
Internet Explorer 11 on Windows 10
Impact
Security Bypass: Remote attackers can bypass security mechanism on vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor
http://technet.microsoft.com/security/bulletin/MS16-104
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-10 | 14.629 | Severity:high:medium |
| ID | 42921 |
| Created | Sep 13, 2016 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2016-3292 |
| Exploit Prediction Score | 0.97% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IE |