CVE-2014-1785

This exploit demonstrates a use-after-free vulnerability in Microsoft Internet Explorer 11 by manipulating memory allocation and deallocation via JavaScript. It uses heap spraying techniques to control freed memory and potentially achieve remote code execution.

This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9 and 10, where a freed CFormElement object is accessed, leading to memory corruption. The exploit triggers the vulnerability by manipulating the DOM and forcing a click event on an input element after its parent form is removed.