######################################################################################

# Vuln Title: Internet Explorer Remote Code Execution Exploit (DEP and ASLR Bypass)

#

# Author: FaryadR (a.k.a Ciph3r)

# tested on : win 7 and IE 8 (DEP and ASLR)

# Twitter : https://twitter.com/faryadR

# Mail : Ciph3r.secure@gmail.com

# Website : http://0c0c0c0c.com

# Vendor : Microsoft

# Time Element Memory Corruption Vulnerability

#

######################################################################################

vuln Description :

The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory,

which allows remote attackers to execute arbitrary code by accessing an object that (1)

was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."

Download Exploit : http://www.exploit-db.com/sploits/20547.rar