CVE-2010-0249

This is a Metasploit module exploiting CVE-2010-0249, a memory corruption vulnerability in Internet Explorer 6. It uses heap spraying and a malformed comment element to achieve remote code execution.

This exploit targets CVE-2010-0249, a vulnerability in Internet Explorer, by serving a malicious HTML page that triggers a use-after-free condition to execute arbitrary code. The payload spawns a calculator as a proof-of-concept.

This Metasploit module exploits a memory corruption vulnerability in Internet Explorer 6 (CVE-2010-0249) by leveraging a heap spray technique and a crafted HTML page with JavaScript to achieve remote code execution. The exploit was part of the 'Operation Aurora' attacks and is a direct port of the public sample published to Wepawet.