CVE-2007-1682

This exploit targets a stack buffer overflow in the SoftArtisans XFile FileManager ActiveX control (SAFmgPwd.dll 2.0.5.3) via the GetDriveName() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability and execute arbitrary code.

This Metasploit module exploits a stack buffer overflow in the SoftArtisans XFile FileManager ActiveX control (SAFmgPwd.dll 2.0.5.3) via an overly long string passed to the GetDriveName() method, allowing arbitrary code execution.