exploit/windows/browser/ie_execcommand_uaf

functional

MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

view exploit source metasploittype exploitpublished 2012-09-14catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-4969US	high8.1OT critical	80.3% (100th)	KEV	2012-09-18
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafte…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.