header-logo
Suggest Exploit
vendor:
Internet Explorer
by:
nop
7.5
CVSS
HIGH
Heap Overflow
122
CWE
Product Name: Internet Explorer
Affected Version From: Internet Explorer 6.0 SP1
Affected Version To: Internet Explorer 6.0 SP1
Patch Exists: NO
Related CWE:
CPE: a:microsoft:internet_explorer:6.0
Metasploit:
Other Scripts:
Platforms Tested: Windows 2000 Server SP4, Windows XP SP2
2006

Internet Explorer COM Object Heap Overflow Download Exec Exploit

This is a 0day exploit that targets a heap overflow vulnerability in Internet Explorer's COM Object. It allows an attacker to execute arbitrary code and download and execute a file on the victim's machine. The exploit is written in C and uses a shellcode to achieve code execution.

Mitigation:

Apply the latest security updates and patches for Internet Explorer.
Source

Exploit-DB raw data: