What bug existed in the public Metasploit exploit script for CVE-2017-8464 and how was it fixed?
The original Metasploit script caused the `explorer.exe` process to crash after successfully executing the payload (e.g., calc.exe). The bug was traced to the DLL file generated by the exploit. The fix involved replacing the default DLL with a different one—either a 32-bit or 64-bit DLL from a tested open-source project—which stopped the crash and allowed “perfect exploitation.” For more details on the debugging process and the exact DLLs used, see the Exploitation Testing of Windows Lnk Remote Code Execution Vulnerability (CVE-2017-8464) article.
Metasploitexploit bugDLL replacementexplorer.exe crashCVE-2017-8464