Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-4140 PoC — Microsoft Internet Explorer ASLR绕过漏洞

Source
https://github.com/day6reak/CVE-2014-4140
Associated Vulnerability
Title:Microsoft Internet Explorer ASLR绕过漏洞 (CVE-2014-4140)
Description:Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司开发的一款Web浏览器，是Windows操作系统附带的默认浏览器。 Microsoft IE 8版本至11版本中存在一个安全功能绕过漏洞，让攻击者能够绕过地址空间布局随机化(ASLR)安全功能，该安全功能有助于保护用户免遭多种漏洞攻击。该安全功能绕过本身不允许执行任意代码。但是，攻击者可以将此ASLR绕过漏洞与另一个漏洞（如远程执行代码漏洞）组合使用，从而利用 ASLR 绕过漏洞来运行任意代码。
File Snapshot

 [4.0K]  /data/pocs/17f8477581ed4b5126f82a5799cab2f73ced1c26
├── [ 175]  poc.html
├── [8.1K]  README
└── [3.5K]  textarea_OOB_array_read_notes.txt

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.