---
id: 4684
title: "[CVE-2016-0189] Patch Analysis of CVE-2016–0189"
cve: CVE-2016-0189
source_domain: theori.io
source_url: "https://theori.io/blog/patch-analysis-of-cve-2016-0189"
published_at: "2016-06-21T15:00:00Z"
tags: ["exploit", "patch-analysis", "internet-explorer", "cve-2016-0189", "ms16-051", "vbscript"]
phying_url: "https://phying.com/item/4684"
lang: en
---

# [CVE-2016-0189] Patch Analysis of CVE-2016–0189

## Summary

Diffing MS16-051 to dissect CVE-2016-0189, the Internet Explorer scripting-engine flaw used in South Korean targeted attacks: a missing SafeArray lock plus a policy bypass, rebuilt into a PoC exploit.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2016-0189
- **Published:** 2016-06-21T15:00:00Z
- **Original:** https://theori.io/blog/patch-analysis-of-cve-2016-0189
- **Phying News:** https://phying.com/item/4684