CVE-2015-1730
Microsoft Internet Explorer 9 - Remote Code Execution or Denial of Service via Memory Corruption
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-1730. PoCs published by Skylined.
AI-analyzed exploit summary This exploit leverages a stack-based use-after-free vulnerability in Microsoft Internet Explorer 9 by manipulating the stack during recursive function calls to achieve remote code execution. It uses heap spraying and controlled stack exhaustion to overwrite a vulnerable pointer, redirecting execution flow to attacker-controlled shellcode.
Description
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Exploits (1)
This exploit leverages a stack-based use-after-free vulnerability in Microsoft Internet Explorer 9 by manipulating the stack during recursive function calls to achieve remote code execution. It uses heap spraying and controlled stack exhaustion to overwrite a vulnerable pointer, redirecting execution flow to attacker-controlled shellcode.