Dissecting The Hack

An Information Security Community

Internet Explorer iepeers.dll use-after-free - Demo

Internet Explorer iepeers.dll use-after-free - Demo from Chris John Riley on Vimeo.

[Originally posted on blog.c22.cc]
This video is a simple demonstration of the Metasploit ie_iepeers_pointer exploit on a fully patched Windows XP (sp3) system running IE 7.

Internet Explorer iepeers.dll use-after-free

CVE-2010-0806 / BID 38615 / KB981374

Code for this exploit was provided by Trancer.
More information about the exploit can be found on http://www.rec-sec.com

Rating:

Currently 5/5 stars.
1
2
3
4
5

Get Embed Code

Tags:

You need to be a member of Dissecting The Hack to add comments!

Join Dissecting The Hack

Comment by Leon van der Eijk on March 14, 2010 at 4:05am: What is cool about this exploit is that it spawns a stable/new calc.exe and automatically migrates to its pid in one run. Add "run kitrap0d" for extra awesomeness and system privs :)