12 lines
No EOL
579 B
Text
12 lines
No EOL
579 B
Text
# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability
|
|
# Date: 1/14/2012
|
|
# Author: Byoungyoung Lee, http://exploitshop.wordpress.com
|
|
# Version: Windows 7 32bit, fully patched until Jan 2012
|
|
# Tested on: Windows 7 32bit
|
|
# CVE : CVE-2012-0013
|
|
|
|
PoC: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/18372.docm
|
|
|
|
Open the document file, then allow the macro execution. This will
|
|
execute python script (python interpreters are required).
|
|
DEMO : http://www.youtube.com/watch?v=Odi6HiqzmL8&feature=youtu.be&hd=1 |