CVE-2019-0567 PoC — Microsoft Edge和ChakraCore 缓冲区错误漏洞

Source

https://github.com/NatteeSetobol/CVE-2019-0567-MS-Edge

Associated Vulnerability

Title:Microsoft Edge和ChakraCore 缓冲区错误漏洞 (CVE-2019-0567)
Description:A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.

Description

My proof of concept for CVE-2019 Microsoft-Edge

Readme

CVE-2019-0567-MS-Edge POC


A Proof a concept for MS Edge in as an exercise to learn browser exploiting and migrations that are presented on the Windows 10 machine. All code were created by Connor McGarr and
edited to work on Windows 10 build 15063.483.

shell2js.py
My personal script to convert msfvemon C payload to the javascript payload format.


[Proof of concept video](https://www.youtube.com/watch?v=Uy8yiMQOV6s)


Connor McGarr Blog:

https://connormcgarr.github.io/type-confusion-part-3/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!