Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-1988. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This is a vulnerability writeup describing a buffer overflow in Microsoft Internet Explorer's JPEG rendering library (CVE-2005-1988). It lacks executable exploit code but references a malicious JPEG file (25992-1.jpg) hosted externally.
Description
Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".
Exploits (2)
This is a vulnerability writeup describing a buffer overflow in Microsoft Internet Explorer's JPEG rendering library (CVE-2005-1988). It lacks executable exploit code but references a malicious JPEG file (25992-1.jpg) hosted externally.
This is a functional exploit for CVE-2005-1988, targeting a vulnerability in Internet Explorer's COM object instantiation (MS05-038). It uses a heap spray technique to execute a bind shell on port 28876 via the vulnerable 'blnmgr.dll' COM object.