{"vulnerability": "cve-2016-3321", "sightings": [{"uuid": "b4114d94-3ee3-4dc3-95ed-d89d5933968d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-3321", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "56669ba6-8a95-4ce8-86b7-6ad0f5266486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-3321", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:47.000000Z"}, {"uuid": "a3988e76-aa4d-4281-b005-7195b1f42ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-3321", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ie_sandbox_findfiles.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5a39f01f-00bf-40b5-8bf2-b26e787bd3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-3321", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ie_sandbox_findfiles.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Yorick Koster\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"It was found that Internet Explorer allows the disclosure of local file names.\\n          This issue exists due to the fact that Internet Explorer behaves different for\\n          file:// URLs pointing to existing and non-existent files. When used in\\n          combination with HTML5 sandbox iframes it is possible to use this behavior to\\n          find out if a local file exists. This technique only works on Internet Explorer\\n          10 & 11 since these support the HTML5 sandbox. Also it is not possible to do\\n          this from a regular website as file:// URLs are blocked all together. The attack\\n          must be performed locally (works with Internet zone Mark of the Web) or from a\\n          share.\", \"disclosure_date\": \"2016-08-09\", \"fullname\": \"auxiliary/gather/ie_sandbox_findfiles\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Internet Explorer Iframe Sandbox File Name Disclosure Vulnerability\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/ie_sandbox_findfiles.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/ie_sandbox_findfiles\", \"references\": [\"CVE-2016-3321\", \"MSB-MS16-095\", \"URL-https://securify.nl/advisory/SFY20160301/internet_explorer_iframe_sandbox_local_file_name_disclosure_vulnerability.html\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:16.067696Z"}]}