CVE-2019-1221 PoC — Microsoft Internet Explorer 缓冲区错误漏洞

Source

https://github.com/edxsh/CVE-2019-1221

Associated Vulnerability

Title:Microsoft Internet Explorer 缓冲区错误漏洞 (CVE-2019-1221)
Description:A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'.

Readme

PoC exploit for CVE-2019-1221

Lost the origin of this PoC

Targets Internet Explorer 11 32-bit on Windows 10 x64 upto RS5

Uses "VBScript.Encode" / CVE-2019-0768 so that exploit works up to RS5

Runs `calc` using WinExec

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →