CVE-2014-0257

This Metasploit module exploits CVE-2014-0257, a .NET Deployment Service vulnerability in Internet Explorer's Enhanced Protected Mode, allowing sandbox escape and execution of arbitrary code with Medium Integrity. It checks for vulnerable .NET versions (4.5 or 4.5.1) and leverages a DLL payload to achieve exploitation.

This Metasploit module exploits CVE-2014-0257, a sandbox escape vulnerability in Internet Explorer's .NET Deployment Service (dfsvc.exe), allowing code execution at Medium Integrity from Low Integrity. It checks for vulnerable .NET versions, loads a malicious DLL, and executes a PowerShell payload.