CVE-2012-0013

This Metasploit module exploits CVE-2012-0013 by crafting a malicious Office Macro document that bypasses ClickOnce's unsafe object handling, allowing arbitrary code execution via a Python or Ruby payload that downloads and executes an executable.

This exploit leverages a vulnerability in Microsoft Windows (CVE-2012-0013) via a malicious macro-enabled document (18372.docm). When executed, it runs a Python script to achieve arbitrary code execution, demonstrating a remote code execution (RCE) attack vector.

This Metasploit module exploits CVE-2012-0013 by crafting a malicious Office Macro document that bypasses ClickOnce security warnings to execute arbitrary code via embedded Python or Ruby payloads.