CVE-2007-1568

This exploit targets a buffer overflow in NewsReactor 20070220 by crafting a malicious NNTP article. It leverages a JMP EDI instruction in advapi32.dll (XP SP2 FR) to redirect execution to shellcode that spawns calc.exe.

This exploit targets a remote buffer overflow in NewsReactor 20070220 by sending a maliciously crafted article with an overly long filename. It executes calc.exe via shellcode when the victim connects to a fake NNTP server (port 119).