CVE-2009-0075
EXPLOITEDMicrosoft Internet Explorer 7 - Uninitialized Memory Corruption
Title source: llmExploitation Summary
CVE-2009-0075 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 7 public exploits from researchers including Metasploit, webDEViL, David Kennedy (ReL1K), including a Metasploit module exploits/windows/browser/ms09_002_memory_corruption.
AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in Internet Explorer 7 (CVE-2009-0075) by manipulating uninitialized memory via the CFunctionPointer function. It uses JavaScript to trigger the vulnerability and execute arbitrary shellcode.
Description
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."
Exploits (7)
This exploit targets a memory corruption vulnerability in Internet Explorer 7 (CVE-2009-0075) by manipulating uninitialized memory via the CFunctionPointer function. It uses JavaScript to trigger the vulnerability and execute arbitrary shellcode.
This is a heap spray exploit targeting CVE-2009-0075, a vulnerability in Microsoft Internet Explorer's handling of HTML objects. The exploit uses JavaScript to spray the heap with shellcode and trigger the vulnerability via the 'click' method on a cloned 'tbody' element, leading to arbitrary code execution (spawning calc.exe).
This exploit targets a memory corruption vulnerability in Microsoft Internet Explorer 7 (CVE-2009-0076) by serving a malicious HTML page with JavaScript that triggers a buffer overflow, leading to remote code execution via a bind shell on port 5500.
This exploit targets a memory corruption vulnerability in Internet Explorer 7 (CVE-2009-0076) via JavaScript heap spraying. It uses a bind shell shellcode to achieve remote code execution on vulnerable systems.
This exploit targets a memory corruption vulnerability in Internet Explorer (CVE-2009-0075) by manipulating JavaScript arrays and DOM objects to trigger a heap spray and arbitrary code execution. The PoC uses unescape and heap spraying techniques to achieve remote code execution.
This exploit targets CVE-2009-0075, a memory corruption vulnerability in Internet Explorer 7, by spraying the heap with shellcode and triggering the bug via a crafted HTML page. It uses a Metasploit-generated payload to achieve remote code execution (calc.exe).
This Metasploit module exploits a memory corruption vulnerability in Microsoft Internet Explorer 7 (CVE-2009-0075) by manipulating uninitialized memory via the CFunctionPointer function. It uses JavaScript to trigger the vulnerability, leading to arbitrary code execution.