CVE-2007-2356

This exploit targets a buffer overflow vulnerability in GIMP 2.2.14 by crafting a malicious RAS file that triggers arbitrary code execution via a call to ESP in libgimpcolor-2.0-0.dll. The payload is designed to download and execute a remote file.

This exploit targets a buffer overflow vulnerability in the SUNRAS plugin of GIMP v2.2.14, specifically in the `set_color_table` function. It includes shellcode for both launching calc.exe and binding a shell to port 4444.