CVE-2013-4015
Microsoft Internet Explorer 6-10 - Local Privilege Escalation via Sandboxed Code Execution
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4015. PoCs published by Metasploit.
AI-analyzed exploit summary This is a functional Metasploit exploit for CVE-2013-3161, targeting a use-after-free vulnerability in Microsoft Internet Explorer 8. It leverages a malformed table structure to trigger the vulnerability and includes ROP chains for both Windows XP and Windows 7.
Description
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code.
Exploits (1)
This is a functional Metasploit exploit for CVE-2013-3161, targeting a use-after-free vulnerability in Microsoft Internet Explorer 8. It leverages a malformed table structure to trigger the vulnerability and includes ROP chains for both Windows XP and Windows 7.