CVE-2016-0034 PoC — Microsoft Silverlight运行时远程执行代码漏洞

Source

https://github.com/hybridious/CVE-2016-0034-Decompile

Associated Vulnerability

Title: Microsoft Silverlight运行时远程执行代码漏洞 (CVE-2016-0034)
Description:Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."

Description

CVE-2016-0034 Decompile

Readme

# CVE-2016-0034-Decompile


CVE-2016-0034  is a bug that affects Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability." 


CVE-2016-0034 Decompile Source that was used by Rig Exploit Kit in the wild.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →