Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-0976. PoCs published by shinnai, Umesh Wanve.
AI-analyzed exploit summary This exploit targets a stack overflow vulnerability in ActSoft DVD-Tools (dvdtools.ocx v. 3.8.5.0) via a malicious HTML file. It uses VBScript to trigger the overflow with a crafted buffer, EIP redirection, and shellcode execution.
Description
Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary code via a long DVD_TOOLS.OpenDVD property value.
Exploits (3)
This exploit targets a stack overflow vulnerability in ActSoft DVD-Tools (dvdtools.ocx v. 3.8.5.0) via a malicious HTML file. It uses VBScript to trigger the overflow with a crafted buffer, EIP redirection, and shellcode execution.
This exploit targets a buffer overflow vulnerability in ActSoft DVD-Tools (dvdtools.ocx) by crafting a malicious buffer with a NOP sled, SEH handler, and shellcode to execute arbitrary commands (e.g., calc.exe). The exploit is delivered via an HTML file leveraging the vulnerable ActiveX control.
This is a proof-of-concept exploit for a buffer overflow vulnerability in ActSoft DVD-Tools (dvdtools.ocx). It demonstrates arbitrary code execution by overwriting EIP with a long string of 'A' characters.