CVE-2017-0037

This exploit leverages a memory corruption vulnerability in Internet Explorer (CVE-2017-0059) to achieve remote code execution. It uses heap spraying, ROP chains, and shellcode execution to bypass DEP and execute arbitrary code (e.g., calc.exe).

This is a proof-of-concept exploit for CVE-2017-0037, a memory corruption vulnerability in Microsoft Internet Explorer. The exploit triggers a crash in MSHTML!Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement by manipulating table properties and column spans, leading to a potential use-after-free condition.

This exploit leverages a memory corruption vulnerability in Internet Explorer (CVE-2017-0059) to achieve remote code execution via a crafted HTML page. It uses heap spraying and ROP chains to bypass DEP and execute shellcode.

This repository provides a detailed technical analysis of CVE-2017-0037, a type confusion vulnerability in Microsoft Edge and Internet Explorer. It includes root cause analysis, patch details, and references to the original PoC by Ivan Fratric of Google Project Zero.