CVE-2004-0206

This exploit targets a stack buffer overflow in the Microsoft NetDDE service (CVE-2004-0206) on Windows 2000 SP4 and XP SP0. It leverages DCERPC to trigger the vulnerability and execute arbitrary payloads via a crafted overflow chunk.

This is a proof-of-concept exploit for CVE-2004-0206, targeting a buffer overflow in NetDDE services. It includes shellcode for both port binding and connect-back payloads, demonstrating remote code execution capabilities.

This Metasploit module exploits a stack buffer overflow in the NetDDE service (CVE-2004-0206) by sending a maliciously crafted DCERPC request to the 'nddeapi' pipe, leading to remote code execution on vulnerable Windows systems (pre-XP SP1). The exploit leverages a known return address (0x77e56f43) and includes a payload with specific bad character restrictions.