Microsoft VBScript VariantClear Use After Free

This strike exploits a vulnerability in the Microsoft Internet Explorer Browser. Specifically, the vulnerability exists in VBScript. If a Variant is an object, the object destructor is going to be called and the variant type will be unset. It is possible for the object destructor to then call the attacker controlled code to free the memory holding the variant, and if called upon later a use after free condition will occur. This may lead to a denial of service condition in the browser, or potentially remote code execution.