CVE-2017-11882 PoC — Microsoft Office 安全漏洞

Source

https://github.com/legendsec/CVE-2017-11882-for-Kali

Associated Vulnerability

Title:Microsoft Office 安全漏洞 (CVE-2017-11882)
Description:Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.

Description

# CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below:  https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.   ## Installation 1) Copy the cve_2017_11882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local/ 2) Copy the cve-2017-11882.rtf to /usr/share/metasploit-framework/data/exploits/  This module is a quick port to Metasploit and uses mshta.exe to execute the payload.  There are better ways to implement this module and exploit but will update it as soon as I have the time.

File Snapshot


 [4.0K]  /data/pocs/0876f51247ca0de8855c8ac04be8dea668d6a173

0 directories, 0 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!