CVE-2013-0074

This Metasploit module exploits CVE-2013-0074, a memory corruption vulnerability in Microsoft Silverlight's COALineDashStyleArray, combined with an info leak (CVE-2013-3896) to bypass DEP/ASLR. It delivers a malicious XAP file to achieve arbitrary code execution on Windows systems via Internet Explorer.

This Metasploit module exploits CVE-2013-3896, a vulnerability in Microsoft Silverlight's ScriptObject Initialize() method, which allows unsafe memory access leading to arbitrary code execution. It bypasses DEP/ASLR using a secondary vulnerability in the WriteableBitmap class and has been tested on IE6-IE10 and Windows XP/7.

This Metasploit module exploits CVE-2013-0074, a memory corruption vulnerability in Microsoft Silverlight's ScriptObject Initialize() method, combined with an info leak (CVE-2013-3896) to bypass DEP/ASLR. It delivers a malicious XAP file and DLL to achieve arbitrary code execution on vulnerable Windows systems.