CVE-2004-0733
OllyDbg 1.10 - Remote Code Execution via Format String Specifiers
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0733. PoCs published by jamikazu, Ahmet Cihan.
AI-analyzed exploit summary This exploit leverages a format string vulnerability in OllyDbg v1.10 to execute arbitrary shellcode, which invokes calc.exe. It uses a CALL ESP instruction from kernel32.dll to redirect execution to the shellcode.
Description
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.
Exploits (2)
This exploit leverages a format string vulnerability in OllyDbg v1.10 to execute arbitrary shellcode, which invokes calc.exe. It uses a CALL ESP instruction from kernel32.dll to redirect execution to the shellcode.
This exploit targets CVE-2004-0733 by leveraging a buffer overflow in the OutputDebugString function to execute arbitrary shellcode. The shellcode is designed to spawn a cmd.exe process, and the exploit is intended to be run under a debugger like OllyDbg.