This module exploits a use-after-free vulnerability in Microsoft Internet Explorer where a CParaElement node is released but a reference is still kept in CDoc. This memory is reused when a CDoc relayout is performed.
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/windows/browser/ms13/009_ie_slayoutrun_uafmsf undefined(009_ie_slayoutrun_uaf) > show actions ...actions...msf undefined(009_ie_slayoutrun_uaf) > set ACTION < action-name >msf undefined(009_ie_slayoutrun_uaf) > show options ...show and set options...msf undefined(009_ie_slayoutrun_uaf) > runWith curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub