Internet Explorer CSS recursive call memory corruption
This is one of the most recent exploits available for the Windows platform running IE browser. This exploit is known to affect Windows 7 and Windows 2008 server with IE 8 as the default browser. The working process of this exploit is similar to the one we just discussed in the previous recipe. So let us quickly test it. Our target machine is a Windows 7 ultimate edition with IE 8 (unpatched) running as the default browser.
We will start with launching the msfconsole. Our exploit in this recipe is
exploit/windows/browser/ms11_003_ie_css_import and our payload will be
windows/meterpreter/bind_tcp which will help in gaining shell connectivity with the target machine.