CVE-2014-0282

This is a proof-of-concept exploit for CVE-2014-0282, targeting a use-after-free vulnerability in Internet Explorer 8, 9, and 10. The exploit manipulates form elements and triggers a crash via a race condition during form reset.

This repository contains a proof-of-concept for CVE-2014-0282, demonstrating exploit delivery via steganography and polyglots. It includes tools to encode exploit code into JPG/PNG images and generate HTML+Image polyglots for browser-based exploitation.

This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-0282) by triggering a memory corruption in MSHTML!CInput::DoClick. The exploit frees a CFormElement object via innerHTML manipulation while retaining a reference, leading to writes to freed memory.