CVE-2007-1682
SoftArtisans XFile < 2.4.0 - Remote Code Execution via FileManager ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1682.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/softartisans_getdrivename.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the SoftArtisans XFile FileManager ActiveX control (SAFmgPwd.dll 2.0.5.3) via the GetDriveName() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability and execute arbitrary code.
Description
Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
Exploits (2)
This exploit targets a stack buffer overflow in the SoftArtisans XFile FileManager ActiveX control (SAFmgPwd.dll 2.0.5.3) via the GetDriveName() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability and execute arbitrary code.
This Metasploit module exploits a stack buffer overflow in the SoftArtisans XFile FileManager ActiveX control (SAFmgPwd.dll 2.0.5.3) via an overly long string passed to the GetDriveName() method, allowing arbitrary code execution.