CVE-2013-3893

This Metasploit module exploits a use-after-free vulnerability in Internet Explorer (CVE-2013-3893) by manipulating the `SetMouseCapture` function to trigger arbitrary memory release and subsequent code execution. It leverages ROP chains and heap spraying to achieve reliable exploitation on targeted IE versions.

The repository contains a JavaScript file for formatting pre blocks and handling scroll events, which is unrelated to CVE-2013-3893. No exploit code or technical details about the vulnerability are present.

This is a functional exploit for CVE-2013-3893, a use-after-free vulnerability in Microsoft Internet Explorer 8. It leverages heap spraying and ROP chains to bypass DEP and ASLR, ultimately achieving remote code execution via a reverse shell payload.

This Metasploit module exploits a use-after-free vulnerability in Internet Explorer (CVE-2013-3893) by manipulating the `SetMouseCapture` function to achieve arbitrary code execution. It targets IE 9 on Windows 7 SP1, leveraging Microsoft Office DLLs (2007/2010) for ROP chains.