MS13-009 Microsoft Internet Explorer SLayoutRun Use-After-Free

This Metasploit module exploits a use-after-free vulnerability in Microsoft Internet Explorer where a CParaElement node is released but a reference is still kept in CDoc. This memory is reused when a CDoc relayout is performed. This file is part of the Metasploit Framework and may be subject to...

CVE-2013-0025

creationtimestamp| type| source ---|---|--- 2013-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24495 2013-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24538 2018-05-29 15:50:33+00:00| seen|...

Microsoft Internet Explorer - SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)

Microsoft Internet Explorer - SLayoutRun Use-After-Free MS13-009 Metasploit 1 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Internet Explorer - SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Microsoft Interne...

CVE-2013-0025

CVE-2013-0025 is a use‑after‑free vulnerability in Microsoft Internet Explorer 8 that allows remote code execution when a crafted page triggers access to a deleted object (the classic SLayoutRun UAF). Public details describe an attacker exploiting a freed CParaElement/CTDoc scenario during relayo...

Internet Explorer SLayoutRun Use After Free (MS13-009; CVE-2013-0025)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer SLayoutRun Use After Free (MS13-009) - High Confidence (CVE-2013-0025)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...