Analysis of MS16-104: .URL files Security Feature Bypass (CVE-2016-3353)

CVE

CVE-2016-3353

Published

2017-02-22 23:00

Collected

2026-07-08 12:37

---
id: 4530
title: "Analysis of MS16-104: .URL files Security Feature Bypass (CVE-2016-3353)"
cve: CVE-2016-3353
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/analysis-of-ms16-104-url-files-security-feature-bypass-cve-2016-3353.html"
published_at: "2017-02-22T23:00:00Z"
tags: ["rce", "windows", "cve", "patch-analysis", "internet-explorer", "quarkslab", "binary-diffing"]
phying_url: "https://phying.com/item/4530"
lang: en
---

# Analysis of MS16-104: .URL files Security Feature Bypass (CVE-2016-3353)

## Summary

CVE-2016-3353, a .URL file security feature bypass in IE 11 fixed by MS16-104: binary diffing ieframe.dll to locate the patch, understanding the InternetShortcut warning logic, and building a PoC.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2016-3353
- **Published:** 2017-02-22T23:00:00Z
- **Original:** https://blog.quarkslab.com/analysis-of-ms16-104-url-files-security-feature-bypass-cve-2016-3353.html
- **Phying News:** https://phying.com/item/4530