1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
Source: https://github.com/theori-io/cve-2016-0189 # CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11) Tested on Windows 10 IE11. ### Write-up http://theori.io/research/cve-2016-0189 ### To run 1. Download <code>support/*.dll</code> (or compile \*.cpp for yourself) and <code>exploit/*.html</code> to a directory. 2. Serve the directory using a webserver (or python's simple HTTP server). 3. Browse with a victim IE to <code>vbscript_bypass_pm.html</code>. 4. (Re-fresh or re-open in case it doesn't work; It's not 100% reliable.) Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40118.zip |