CVE-2014-6332

This exploit leverages CVE-2014-6332 (MS14-064) to achieve remote code execution in TheWorld Browser 3.0 Final by serving a malicious HTML page that triggers a VBScript memory corruption vulnerability. The payload downloads and executes a remote executable (e.g., PuTTY in the example).

This exploit leverages CVE-2014-6332, a vulnerability in HTML Compiler, to achieve remote code execution by serving a malicious payload via a local HTTP server. The payload uses VBScript to download and execute an arbitrary file (e.g., PuTTY in the example).

This exploit leverages CVE-2014-6332, a vulnerability in Microsoft Windows HTA (HTML Application) to achieve remote code execution. It generates an HTA file that, when opened, executes arbitrary commands via VBScript, specifically downloading and executing a payload (e.g., PuTTY.exe in the example).

This exploit leverages CVE-2014-6332, a vulnerability in Windows OLE Automation (OleAut32.dll), to achieve remote code execution. It sets up a malicious server that serves an HTML page with embedded VBScript, which triggers the vulnerability when loaded in a vulnerable application like Havij.

This exploit leverages CVE-2014-6332 (MS14-064) to achieve remote code execution via OLE Automation Array manipulation in Internet Explorer. It serves a malicious payload (acunetix.exe) via a Python HTTP server and triggers execution through VBScript.

This exploit leverages a memory corruption vulnerability in OLE Automation Array handling in Internet Explorer (pre-IE11) to achieve remote code execution. It uses VBScript to manipulate array objects and execute a PowerShell payload containing shellcode.

This exploit leverages CVE-2014-6332, a memory corruption vulnerability in Internet Explorer, to achieve remote code execution by manipulating VBScript arrays and object types to bypass memory protections.

This exploit leverages CVE-2014-6332, a vulnerability in Windows OLE Automation (OleAut32.dll), to achieve remote code execution. It sets up a malicious server that delivers a crafted HTML page with VBScript to exploit the vulnerability when visited by a vulnerable client.

This Metasploit module exploits CVE-2014-6332, a vulnerability in Windows OLE Automation Array, to achieve remote code execution via a crafted HTML page with VBScript. It targets Internet Explorer versions 3.0 to 11 on Windows systems.

The repository contains only a README file with minimal information about CVE-2014-6332, stating it is a ZeroDay PoC that starts PowerShell. No actual exploit code or technical details are provided.

This repository provides a detailed technical analysis of CVE-2014-6332, a VBScript engine vulnerability involving integer overflow in SafeArrayRedim. It explains the root cause, exploitation steps, and includes a partial exploit script.

This Metasploit module exploits CVE-2014-6332, a Windows OLE Automation array vulnerability, to achieve remote code execution via Internet Explorer. It uses VBScript for Windows XP and PowerShell for newer systems to deliver and execute payloads.