mandarenmanman/cve-2019-1367CVE-2019-1367
0x00 Background
Internet Explorer is a web browser developed by Microsoft. It has a massive user base.
On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the vulnerability is reported to have been exploited in the wild.
0x01 Vulnerability Description
This vulnerability is caused by memory corruption in the way the Internet Explorer scripting engine handles objects in memory. To exploit this vulnerability, an attacker must convince a user to open a malicious website that hosts the exploit.
Successful exploitation could allow an attacker to gain the same user rights as the current user and execute arbitrary code. If the current user has administrative privileges, the attacker could perform various actions on the system, from installing programs to creating new accounts with full privileges, or even modifying data.
0x02 Vulnerability ID
CVE-2019-1367
0x02 Affected Versions
Internet Explorer 9
Internet Explorer 10
Internet Explorer 11
0x03 Remediation Recommendations
For the security update affecting Internet Explorer 11 on Windows 10 version 1903, see the link:
https://support.microsoft.com/help/4522016
For 32-bit systems, enter the following command in an administrative command prompt:
takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
For 64-bit systems, enter the following commands in an administrative command prompt:
takeown /f %windir%\syswow64\jscript.dll
cacls %windir%\syswow64\jscript.dll /E /P everyone:N
takeown /f %windir%\system32\jscript.dll
cacls %windir%\system32\jscript.dll /E /P everyone:N
