CVE-2015-6086

This PoC exploits an out-of-bounds read vulnerability in Internet Explorer's CDOMStringDataList::InitFromString to leak the base address of MSHTML.DLL, bypassing ASLR. It uses heap spraying and memory manipulation techniques to achieve the leak.

This repository contains a proof-of-concept exploit for CVE-2015-6086, an out-of-bounds read vulnerability in Internet Explorer's CDOMStringDataList::InitFromString function. The flaw allows leaking the base address of MSHTML.DLL, bypassing ASLR.

The repository provides a detailed technical analysis of CVE-2015-6086, an out-of-bounds read vulnerability in Internet Explorer's `CDOMStringDataList::InitFromString` function. It includes a code snippet demonstrating the flawed logic and explains how it can be exploited to bypass ASLR by leaking the base address of MSHTML.DLL.