vendor:
Internet Explorer
by:
deadlock (Forrest Orr)
7.5
CVSS
HIGH
Use-After-Free
416
CWE
Product Name: Internet Explorer
Affected Version From: IE 8-11 (64-bit)
Affected Version To: WPAD service (64-bit) on Windows 7 and 8.1 x64
Patch Exists: YES
Related CWE: CVE-2020-0674
CPE: a:microsoft:internet_explorer
Metasploit:
https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0767/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0673/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0710/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0711/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0712/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0713/, https://www.rapid7.com/db/vulnerabilities/msft-cve-2020-0674/
Other Scripts:
https://www.infosecmatter.com/nessus-plugin-library/?id=133147, https://www.infosecmatter.com/nessus-plugin-library/?id=134863, https://www.infosecmatter.com/nessus-plugin-library/?id=134864, https://www.infosecmatter.com/nessus-plugin-library/?id=133608, https://www.infosecmatter.com/nessus-plugin-library/?_page=56, https://www.infosecmatter.com/nessus-plugin-library/?id=70923, https://www.infosecmatter.com/nessus-plugin-library/?id=59180, https://www.infosecmatter.com/nessus-plugin-library/?id=57042, https://www.infosecmatter.com/nessus-plugin-library/?id=52672, https://www.infosecmatter.com/nessus-plugin-library/?id=10404
Platforms Tested: Windows 7 x64, Windows 8.1 x64
2021
Microsoft Internet Explorer 8/11 and WPAD service ‘Jscript.dll’ – Use-After-Free
This exploit is a JavaScript file containing CVE-2020-0674 UAF targetting IE8/11 and WPAD 64-bit on Windows 7 and 8.1 x64. It may be used as an alternative RCE attack vector in tandem with the firefox.exe exploit.
Mitigation:
Disable JavaScript in the browser, use a firewall to block malicious requests, and use a secure web browser.
