CVE-2017-0059
MEDIUM KEVInternet Explorer 9-11 - Information Disclosure via Crafted Web Site
Title source: llmExploitation Summary
CVE-2017-0059 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 28, 2022. EIP tracks 3 public exploits from researchers including mschenk, Google Security Research, redr2e.
AI-analyzed exploit summary This exploit leverages a memory corruption vulnerability in Internet Explorer (CVE-2017-0059) to achieve remote code execution. It uses heap spraying, ROP chains, and shellcode execution to bypass DEP and execute arbitrary code (e.g., calc.exe).
Description
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.
Exploits (3)
This exploit leverages a memory corruption vulnerability in Internet Explorer (CVE-2017-0059) to achieve remote code execution. It uses heap spraying, ROP chains, and shellcode execution to bypass DEP and execute arbitrary code (e.g., calc.exe).
This PoC demonstrates a use-after-free vulnerability in Internet Explorer 11, specifically targeting the textarea element's text value. The exploit triggers memory corruption by manipulating the textarea's defaultValue after freeing its memory, leading to potential information disclosure or further exploitation.
This exploit leverages a memory corruption vulnerability in Internet Explorer (CVE-2017-0059) to achieve remote code execution via a crafted HTML page. It uses heap spraying and ROP chains to bypass DEP and execute shellcode.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N