目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CVE-2020-0674 PoC — Microsoft Internet Explorer 资源管理错误漏洞

来源
https://github.com/5l1v3r1/CVE-2020-0674
关联漏洞
标题:Microsoft Internet Explorer 资源管理错误漏洞 (CVE-2020-0674)
Description:Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft IE 9、10和11中脚本引擎处理内存对象的方法存在资源管理错误漏洞。攻击者可利用该漏洞在当前用户的上下文中执行任意代码，损坏内存。以下产品及版本受到影响： Internet Explorer 10版本， Internet Explorer 9版本， Internet Explorer 11版本。
Description
Info about CVE-2020-0674
介绍
## Test Internet Explorer on CVE-2020-0674

If you can see the text: `jscript.dll says hello` on this page:
https://binaryfigments.github.io/CVE-2020-0674/

Then you can be vulnerable the this attack. You will see the following screen.

![jscript.png](https://raw.githubusercontent.com/binaryfigments/CVE-2020-0674/master/jscript.png "jscript.dll")

Mitigation steps from [Microsoft's advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200001)

For 32-bit systems, enter the following command at an administrative command prompt:

```shell
takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
```

For 64-bit systems, enter the following command at an administrative command prompt:

```shell
takeown /f %windir%\syswow64\jscript.dll
cacls %windir%\syswow64\jscript.dll /E /P everyone:N
takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
```

### Links

* https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200001
* https://www.kryptoslogic.com/blog/2020/01/rdp-to-rce-when-fragmentation-goes-wrong/ 
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0674 
* https://techcrunch.com/2020/01/18/internet-explorer-security-flaw/ 
* https://kb.cert.org/vuls/id/338824/ 
* https://www.us-cert.gov/ncas/current-activity/2020/01/17/microsoft-releases-security-advisory-internet-explorer 
* https://securityaffairs.co/wordpress/96560/hacking/cve-2020-0674-ie-0day.html 
* https://www.ncsc.nl/actueel/advisory?id=NCSC-2020-0056
文件快照

 [4.0K]  /data/pocs/f29d75e300af85c27e8eb83f31d47a0b9894e64f
├── [4.0K]  docs
│   ├── [ 160]  index.html
│   └── [ 14K]  jscript.png
├── [ 14K]  jscript.png
├── [1.0K]  LICENSE
└── [1.5K]  README.md

1 directory, 5 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 本地 POC 快照面向订阅用户开放；当原始来源失效或无法访问时，本地镜像作为订阅权益的一部分提供。
    3. 持续抓取、验证、维护这份 POC 档案需要不少投入，因此本地快照已纳入付费订阅。您的订阅是让这份资料能继续走下去的关键，由衷感谢。 查看订阅方案 →