Microsoft Internet Explorer 11 (Windows 10) – VBScript Memory Corruption (MS16-051)

• Exploit Database
• 19 阅读

• 作者： Brian Pak
  日期： 2016-06-22
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/40118/

• Source: https://github.com/theori-io/cve-2016-0189
  
  # CVE-2016-0189
  Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
  
  Tested on Windows 10 IE11.
  
  ### Write-up
  http://theori.io/research/cve-2016-0189
  
  ### To run
  1. Download `support/*.dll` (or compile \*.cpp for yourself) and `exploit/*.html` to a directory.
  2. Serve the directory using a webserver (or python's simple HTTP server).
  3. Browse with a victim IE to `vbscript_bypass_pm.html`.
  4. (Re-fresh or re-open in case it doesn't work; It's not 100% reliable.)
  
  Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40118.zip