CVE-2017-0100

This PoC exploits CVE-2017-0100 by leveraging the IHxHelpPaneServer COM interface to execute arbitrary commands via the Execute method. The code demonstrates a local privilege escalation by launching calc.exe through a crafted file:// URL.

This C# PoC exploits CVE-2017-0100, a COM Session Moniker EoP vulnerability, by leveraging the IHxHelpPaneServer interface to execute arbitrary processes (e.g., notepad.exe) in another user's session without proper permission checks. It demonstrates the flaw by binding to a session moniker and executing a process in a different active session.