CVE-2017-0290

This exploit leverages a type confusion vulnerability in the MsMpEng (Microsoft Malware Protection Engine) to achieve remote code execution. The vulnerability arises from the improper handling of the 'message' property in the JsDelegateObject_Error::toString() function, allowing arbitrary object types to be passed to JsRuntimeState::triggerShortStrEvent().

This repository provides a detailed writeup and references for CVE-2017-0290, a type confusion vulnerability in the Microsoft Malware Protection Engine (MsMpEng). It includes links to the original PoC and technical analysis from Project Zero, but does not contain functional exploit code.

This repository provides a detailed writeup and references for CVE-2017-0290, a type confusion vulnerability in the Microsoft Malware Protection Engine (MsMpEng) that allows remote code execution. It includes links to the original Project Zero report and external analysis but does not contain functional exploit code.

The repository contains no functional exploit code or technical details, only a vague README with buzzwords and no substantive information about CVE-2017-0290. The content appears to be a social engineering lure.