Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-0307.
PoCs published by Metasploit, Jason Kratzer, sinn3r, including Metasploit module exploits/windows/browser/ms14_012_textrange.
AI-analyzed exploit summary This Metasploit module exploits a use-after-free vulnerability in Internet Explorer (CVE-2014-0307) by manipulating TextRange objects and leveraging ROP chains to achieve remote code execution.
Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."
Exploits (2)
This Metasploit module exploits a use-after-free vulnerability in Internet Explorer (CVE-2014-0307) by manipulating TextRange objects and leveraging ROP chains to achieve remote code execution.
This Metasploit module exploits a use-after-free vulnerability in Microsoft Internet Explorer (CVE-2014-0307) by manipulating TextRange objects and leveraging heap spraying to achieve remote code execution. The exploit targets specific builds of IE9 and uses ROP chains to bypass DEP.