CVE-2024-26169 PoC — Windows Error Reporting Service Elevation of Privilege Vulnerability

Source

https://github.com/kautilyagupt/CVE-2024-26169-Detail-1

Associated Vulnerability

Title:Windows Error Reporting Service Elevation of Privilege Vulnerability (CVE-2024-26169)
Description:Windows Error Reporting Service Elevation of Privilege Vulnerability

Readme

# CVE-2017-11882-metasploit
This is a Metasploit module which exploits CVE-2017-11882 using the POC below:

https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.


## Installation
1) Copy the cve_2017_11882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local/
2) Copy the cve-2017-11882.rtf to /usr/share/metasploit-framework/data/exploits/

This module is a quick port to Metasploit and uses mshta.exe to execute the payload.

There are better ways to implement this module and exploit but will update it as soon as I have the time.

File Snapshot


 [4.0K]  /data/pocs/5ff7e5b28f6aa7722949c7685cdc47454246a38f
├── [2.9K]  cve_2017_11882.rb
├── [7.8K]  cve-2017-11882.rtf
└── [ 583]  README.md

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!