{"uuid": "54dc27c7-7901-44e1-92f7-de62c6555214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0016", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms15_004_tswbproxy.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86\", \"author\": [\"Unknown\", \"Henry Li\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses a process creation policy in Internet Explorer's\\n            sandbox; specifically, Microsoft's RemoteApp and Desktop Connections runtime\\n            proxy, TSWbPrxy.exe.  This vulnerability allows the attacker to escape the\\n            Protected Mode and execute code with Medium Integrity. At the moment, this\\n            module only bypass Protected Mode on Windows 7 SP1 and prior (32 bits). This\\n            module has been tested successfully on Windows 7 SP1 (32 bits) with IE 8 and IE\\n            11.\", \"disclosure_date\": \"2015-01-13\", \"fullname\": \"exploit/windows/local/ms15_004_tswbproxy\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/ms15_004_tswbproxy.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/local/ms15_004_tswbproxy\", \"references\": [\"CVE-2015-0016\", \"MSB-MS15-004\", \"URL-http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Protected Mode (Windows 7) / 32 bits\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.292868Z"}