Microsoft Windows NetBIOS Spoofing Vulnerability (CVE-2016-3299) (MS16-077)

Microsoft Windows NetBIOS Spoofing Vulnerability (CVE-2016-3299) (MS16-077)
Microsoft Windows NetBIOS Spoofing Vulnerability (CVE-2016-3299) (MS16-077)

Release date:
Updated on:

Affected Systems:

Microsoft Windows Vista SP2
Microsoft Windows Server 2012 Gold R2
Microsoft Windows Server 2012 Gold
Microsoft Windows Server 2008 SP2 R2 SP1
Microsoft Windows Server 2008 SP2
Microsoft Windows RT 8.1
Microsoft Windows 8.1
Microsoft Windows 7 SP1
Microsoft Windows 10 Gold 1511
Microsoft Windows 10 Gold

Description:

CVE (CAN) ID: CVE-2016-3299

Microsoft Windows is a popular computer operating system.

Some versions of Windows have a security vulnerability in the NetBIOS verification response. Remote attackers can exploit this vulnerability to hijack network traffic, bypass the enhanced protection mode, or use the application container protection mechanism, then, malicious content is displayed in the browser.

<* Source: Microsoft

Link: http://technet.microsoft.com/security/bulletin/MS16-077
*>

Suggestion:

Vendor patch:

Microsoft
---------
Microsoft has released a Security Bulletin (MS16-077) and patches for this:
MS16-077: Security Update for WPAD (3165191)
Link: http://technet.microsoft.com/security/bulletin/MS16-077

This article permanently updates the link address: