CVE-2007-2192

This exploit targets a local buffer overflow vulnerability in PhotoFiltre Studio X (version 10.3.0) via a maliciously crafted .tif file. It overwrites the SEH handler with a 'pop pop ret' instruction and the next SEH with a 'jmp ebp' to redirect execution flow, leveraging a 'jmp 0x40 bytes' instruction due to limited space for shellcode.

This exploit demonstrates a buffer overflow in Photofiltre Studio v8.1.1 by crafting a malicious .TIF file. It includes shellcode that triggers a beep sound as a proof-of-concept payload.