Lucene search

K
exploitpackByoungyoung LeeEXPLOITPACK:3AC8B0516FAFA260B0583B03F60EBC12
HistoryJan 14, 2012 - 12:00 a.m.

Microsoft Windows - Assembly Execution (MS12-005)

2012-01-1400:00:00
Byoungyoung Lee
10

0.971 High

EPSS

Percentile

99.8%

Microsoft Windows - Assembly Execution (MS12-005)

# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability
# Date: 1/14/2012
# Author: Byoungyoung Lee, http://exploitshop.wordpress.com
# Version: Windows 7 32bit, fully patched until Jan 2012
# Tested on: Windows 7 32bit
# CVE : CVE-2012-0013

PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/18372.docm

Open the document file, then allow the macro execution. This will
execute python script (python interpreters are required).
DEMO : http://www.youtube.com/watch?v=Odi6HiqzmL8&feature=youtu.be&hd=1