{"uuid": "93b4e7d4-91a9-41fa-8702-5c421798180d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms08_078_xml_corruption.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the data binding feature of Internet\\n          Explorer. In order to execute code reliably, this module uses the .NET DLL\\n          memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is\\n          used to create a fake vtable at a known location with all methods pointing\\n          to our payload. Since the .text segment of the .NET DLL is non-writable, a\\n          prefixed code stub is used to copy the payload into a new memory segment and\\n          continue execution from there.\", \"disclosure_date\": \"2008-12-07\", \"fullname\": \"exploit/windows/browser/ms08_078_xml_corruption\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS08-078 Microsoft Internet Explorer Data Binding Memory Corruption\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms08_078_xml_corruption.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ms08_078_xml_corruption\", \"references\": [\"CVE-2008-4844\", \"OSVDB-50622\", \"BID-32721\", \"MSB-MS08-078\", \"URL-https://web.archive.org/web/20080913064223/http://taossa.com/archive/bh08sotirovdowd.pdf\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:08.311005Z"}