CVE-2007-2222

This is a working proof-of-concept exploit for CVE-2007-2222, targeting a buffer overflow vulnerability in Microsoft Windows DirectSpeechSynthesis Module (XVoice.dll 4.0.4.2512). The exploit uses a crafted HTML file with VBScript to trigger the overflow and execute arbitrary shellcode, achieving remote code execution.

This exploit targets a buffer overflow vulnerability in Microsoft Windows DirectSpeechSynthesis (XVoice.dll) and DirectSpeechRecognition (Xlisten.dll) modules. It leverages a Unicode-based SEH overwrite to execute arbitrary shellcode, adding an administrator account via Metasploit's JmpCallAdditive technique.