CVE-2007-2238
Microsoft Intelligent Application Gateway 2007 - Remote Code Execution via Whale Client Components ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2238.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/mswhale_checkforupdates.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Microsoft Whale Intelligent Application Gateway's ActiveX control via the CheckForUpdates method. It uses heap spraying and JavaScript obfuscation to deliver a payload, achieving remote code execution.
Description
Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Application Gateway (IAG) before 3.7 SP2, allow remote attackers to execute arbitrary code via long arguments to the (1) CheckForUpdates or (2) UpdateComponents methods.
Exploits (2)
This exploit targets a stack buffer overflow in Microsoft Whale Intelligent Application Gateway's ActiveX control via the CheckForUpdates method. It uses heap spraying and JavaScript obfuscation to deliver a payload, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in Microsoft Whale Intelligent Application Gateway's WhlMgr.dll via an overly long string passed to the CheckForUpdates() method. It uses heap spraying and obfuscated JavaScript to deliver a payload, achieving remote code execution.