Microsoft Internet Explorer 11 (Windows 10) - VBScript Memory Corruption Proof-of-Concept Exploit (M

🗓️ 22 Jun 2016 00:00:00Reported by Brian PakType

zdt🔗 0day.today👁 51 Views

Microsoft Internet Explorer 11 (Windows 10) VBScript Memory Corruption PoC Exploi

Reporter	Title	Published	Views	Family All 77
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	25 Jun 201601:48	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	22 Jun 201623:03	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	29 Apr 202620:50	–	githubexploit
ATTACKERKB	CVE-2016-0189	11 May 201600:00	–	attackerkb
ATTACKERKB	CVE-2016-0187	11 May 201600:00	–	attackerkb
BDU FSTEC	The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.	18 Nov 202100:00	–	bdu_fstec
Circl	CVE-2016-0189	2 Oct 201616:51	–	circl
CISA KEV Catalog	Microsoft Internet Explorer Memory Corruption Vulnerability	28 Mar 202200:00	–	cisa_kev
CNVD	Microsoft JScript and VBScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-03119)	12 May 201600:00	–	cnvd
Check Point Advisories	Microsoft Internet Explorer Memory Corruption (MS16-051: CVE-2016-0189)	10 May 201600:00	–	checkpoint_advisories

Source: https://github.com/theori-io/cve-2016-0189
 
# CVE-2016-0189
Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
 
Tested on Windows 10 IE11.
 
### Write-up
http://theori.io/research/cve-2016-0189
 
### To run
1. Download `support/*.dll` (or compile \*.cpp for yourself) and `exploit/*.html` to a directory.
2. Serve the directory using a webserver (or python's simple HTTP server).
3. Browse with a victim IE to `vbscript_bypass_pm.html`.
4. (Re-fresh or re-open in case it doesn't work; It's not 100% reliable.)
 
EDB-Mirror: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40118.zip

#  0day.today [2018-04-06]  #

22 Jun 2016 00:00Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.90799