CVE-2003-0344

This Metasploit module exploits a memory corruption vulnerability in Internet Explorer's handling of the OBJECT type attribute (CVE-2003-0344). It uses an egghunter and carefully crafted return addresses to achieve remote code execution on vulnerable Windows systems.

This exploit targets a buffer overflow vulnerability in Internet Explorer 5.x-6.x (CVE-2003-0344) by crafting a malicious HTML page with embedded shellcode. The exploit leverages a flaw in URLMON.DLL during wide character conversion to execute arbitrary code via a reverse shell.

The provided text describes a boundary condition error in Microsoft Internet Explorer when handling OBJECT tags with excessive data, potentially leading to arbitrary code execution. However, the actual exploit code is not included in the provided content.

This Metasploit module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute (CVE-2003-0344) by crafting a malicious HTML page that triggers memory corruption, leading to arbitrary code execution. It uses an egghunter technique to locate and execute the payload in memory.