Exploitation Summary
EIP tracks 3 public exploits for CVE-2015-6086. PoCs published by Ashfaq Ansari, payatu, OpenSISE.
AI-analyzed exploit summary This PoC exploits an out-of-bounds read vulnerability in Internet Explorer's CDOMStringDataList::InitFromString to leak the base address of MSHTML.DLL, bypassing ASLR. It uses heap spraying and memory manipulation techniques to achieve the leak.
Description
Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
Exploits (3)
This PoC exploits an out-of-bounds read vulnerability in Internet Explorer's CDOMStringDataList::InitFromString to leak the base address of MSHTML.DLL, bypassing ASLR. It uses heap spraying and memory manipulation techniques to achieve the leak.
This repository contains a proof-of-concept exploit for CVE-2015-6086, an out-of-bounds read vulnerability in Internet Explorer's CDOMStringDataList::InitFromString function. The flaw allows leaking the base address of MSHTML.DLL, bypassing ASLR.
The repository provides a detailed technical analysis of CVE-2015-6086, an out-of-bounds read vulnerability in Internet Explorer's `CDOMStringDataList::InitFromString` function. It includes a code snippet demonstrating the flawed logic and explains how it can be exploited to bypass ASLR by leaking the base address of MSHTML.DLL.