CVE-2006-3866

This exploit leverages a stack-based buffer overflow in Microsoft Internet Explorer's VML (Vector Markup Language) rendering engine via heap spraying to achieve remote code execution. It bypasses basic protections by controlling EIP to jump into heap-allocated shellcode.

This is a functional exploit for CVE-2006-3866, a VML buffer overflow vulnerability in Microsoft Internet Explorer. It uses heap spraying to achieve remote code execution by triggering a buffer overflow in the VML rendering engine, ultimately invoking calc.exe as a proof of concept.