CVE-2007-1683
IncrediMail IMMenuShellExt ActiveX Control - Stack-based Buffer Overflow in DoWebMenuAction
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1683. PoCs published by Lincoln, Umesh Wanve.
AI-analyzed exploit summary This exploit targets a SEH-based buffer overflow vulnerability in Incredimail's ImShExtU.dll ActiveX control. It uses a long string of 'A' characters to trigger memory corruption via the DoWebMenuAction method.
Description
Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote attackers to execute arbitrary code via unspecified vectors.
Exploits (2)
This exploit targets a SEH-based buffer overflow vulnerability in Incredimail's ImShExtU.dll ActiveX control. It uses a long string of 'A' characters to trigger memory corruption via the DoWebMenuAction method.
This exploit targets a buffer overflow vulnerability in the IncrediMail IMMenuShellExt ActiveX control. It uses a crafted string to overflow the buffer and execute shellcode that launches the calculator application on the vulnerable system.