Description
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution
exploit/windows/browser/ie_createobject
Exploit-DB 1
- Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit) EDB-16561 · remote · Sep 20, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20843 vdb-entry
- 20061212 ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability mailing-list
- http://research.eeye.com/html/alerts/zeroday/20061031.html
- MS06-073 vendor-advisory
- 927709 vendor-advisory
- 20797 vdb-entry
- TA06-346A third-party-advisory
- 22603 third-party-advisory
- ADV-2006-4282 vdb-entry
- oval:org.mitre.oval:def:288 vdb-entry signature
- SSRT061288 vendor-advisory
- 1017142 vdb-entry
- VU#854856 third-party-advisory
- http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
- http://www.zerodayinitiative.com/advisories/ZDI-06-047.html
- ie-wscriptshell-command-execution(29915) vdb-entry
- http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx