{"uuid": "376414e2-2214-4d9e-998f-d2545f4c2970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0257", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"James Forshaw\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses a process creation policy in Internet Explorer's sandbox, specifically\\n          in the .NET Deployment Service (dfsvc.exe), which allows the attacker to escape the\\n          Enhanced Protected Mode, and execute code with Medium Integrity.\", \"disclosure_date\": \"2014-02-11\", \"fullname\": \"exploit/windows/local/ms14_009_ie_dfsvc\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"MS14-009 .NET Deployment Service IE Sandbox Escape\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/ms14_009_ie_dfsvc.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/local/ms14_009_ie_dfsvc\", \"references\": [\"CVE-2014-0257\", \"MSB-MS14-009\", \"BID-65417\", \"URL-https://github.com/tyranid/IE11SandboxEscapes\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"IE 8 - 11\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.069994Z"}