Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0713, CVE-2020-0767.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Internet Explorer 10 | Windows Server 2012 | — |
| Microsoft | Internet Explorer 11 | Windows 10 Version 1803 for 32-bit Systems, Windows 10 Version 1803 for x64-based Systems, Windows 10 Version 1803 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows Server 2019… | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems | unspecified | — |
| Microsoft | Internet Explorer 11 on Windows Server 2012 | unspecified | — |
| Microsoft | Internet Explorer 9 | Windows Server 2008 for x64-based Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Microsoft Internet Explorer 11 and WPAD service 'Jscript.dll' - Use-After-Free EDB-49863 · local · May 13, 2021
- Microsoft Internet Explorer 11 - Use-After-Free EDB-49062 · local · Nov 17, 2020
GitHub 4 repositories
-
maxpl0it/CVE-2020-0674-Exploit ★ 222 · May 7, 2020
This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.
-
Neko-chanQwQ/CVE-2020-0674-PoC ★ 1 · Jul 3, 2021
随便放点自己弄的小东西
-
Micky-Thongam/Internet-Explorer-UAF ★ 0 · Dec 10, 2023
Porting the CVE-2020-0674 exploit for Windows8.1 and Windows10
-
Ken-Abruzzi/CVE-2020-0674 ★ 0 · Sep 30, 2020
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0674
- https://github.com/maxpl0it/CVE-2020-0674-Exploit
- http://packetstormsecurity.com/files/159137/Microsoft-Internet-Explorer-11-Use-After-Free.html
- http://packetstormsecurity.com/files/161309/Microsoft-Internet-Explorer-11-Use-After-Free.html
- http://packetstormsecurity.com/files/162565/Microsoft-Internet-Explorer-8-11-Use-After-Free.html