Microsoft Internet Explorer UAF Exploitation: Past, Present and Future

No ratings

Presented at CounterMeasure 2014 by

Abdul Hariri

Over the last couple of years we’ve seen a rise of use-after-free zero day vulnerabilities being exploited in Microsoft Internet Explorer. Internet Explorer has a rich attack surface that allows attackers to maximize their return-on-investment. This talk focuses on the exploitation techniques that have been used in the past by attackers and sheds light on the future of UAF exploitation in MS IE. I’ll begin by reviewing common techniques that have been used to exploit IE. Then I’ll discuss the mitigations introduced that made UAF exploitation harder. I’ll also talk about the introduction of Isolated Heap and how it changes UAF exploitation. Finally I’ll will apply these exploitation techniques to CVE-2014-1776, and demonstrate an exploit.