CVE-2019-1221 PoC — Microsoft Internet Explorer 缓冲区错误漏洞

Source

https://github.com/edxsh/CVE-2019-1221

Associated Vulnerability

Title:Microsoft Internet Explorer 缓冲区错误漏洞 (CVE-2019-1221)
Description:Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft IE 11中脚本引擎处理内存对象的方法存在远程代码执行漏洞。攻击者可利用该漏洞在当前用户的上下文中执行任意代码，损坏内存。

Readme

PoC exploit for CVE-2019-1221

Lost the origin of this PoC

Targets Internet Explorer 11 32-bit on Windows 10 x64 upto RS5

Uses "VBScript.Encode" / CVE-2019-0768 so that exploit works up to RS5

Runs `calc` using WinExec

File Snapshot


 [4.0K]  /data/pocs/1dd5ce03cc4ed53a637ee7137687d0e4443caf1f
├── [ 28K]  exploit.html
└── [ 222]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!