This module exploits a vulnerability found in Microsoft Internet Explorer. A use-after-free condition occurs when a CButton object is freed, but a reference is kept and used again during a page reload, an invalid memory that's controllable is used, and allows arbitrary code execution under the context of the user.
Please note: This vulnerability has been exploited in the wild targeting mainly China/Taiwan/and US-based computers.
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/windows/browser/ie/cbutton_uafmsf undefined(cbutton_uaf) > show actions ...actions...msf undefined(cbutton_uaf) > set ACTION < action-name >msf undefined(cbutton_uaf) > show options ...show and set options...msf undefined(cbutton_uaf) > runWith curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub