CVE-2006-6707

This Metasploit module exploits a stack buffer overflow in McAfee Visual Trace 3.25 ActiveX Control (NeoTraceExplorer.dll 1.0.0.1) via the 'TraceTarget()' method. It delivers a payload through a malicious HTML page, achieving remote code execution on vulnerable systems.

This is a working exploit for CVE-2006-6707, targeting a buffer overflow in NeoTracePro 3.25 ActiveX Control via the TraceTarget() method. It uses heap spraying to bypass address restrictions and executes a bind shell payload.

This Metasploit module exploits a stack buffer overflow in the McAfee Visual Trace ActiveX control by sending an overly long string to the 'TraceTarget()' method, allowing arbitrary code execution. The exploit is delivered via a malicious HTML page with embedded JavaScript.