CVE-2007-2222
Microsoft Internet Explorer - Remote Code Execution via ActiveX Speech Control Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2222. PoCs published by rgod.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2007-2222, targeting a buffer overflow vulnerability in Microsoft Windows DirectSpeechSynthesis Module (XVoice.dll 4.0.4.2512). The exploit uses a crafted HTML file with VBScript to trigger the overflow and execute arbitrary shellcode, achieving remote code execution.
Description
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.
Exploits (2)
This is a working proof-of-concept exploit for CVE-2007-2222, targeting a buffer overflow vulnerability in Microsoft Windows DirectSpeechSynthesis Module (XVoice.dll 4.0.4.2512). The exploit uses a crafted HTML file with VBScript to trigger the overflow and execute arbitrary shellcode, achieving remote code execution.
This exploit targets a buffer overflow vulnerability in Microsoft Windows DirectSpeechSynthesis (XVoice.dll) and DirectSpeechRecognition (Xlisten.dll) modules. It leverages a Unicode-based SEH overwrite to execute arbitrary shellcode, adding an administrator account via Metasploit's JmpCallAdditive technique.