CVE-2007-2563

This exploit targets a buffer overflow vulnerability in Versalsoft HTTP File Uploader (UFileUploaderD.dll v. 6.0.0.38) using a heap spray technique to execute arbitrary code (calc.exe). The exploit is triggered via a malicious HTML file that leverages JavaScript to overflow the buffer in the 'AddFile()' method.

This exploit demonstrates a buffer overflow in Versalsoft HTTP File Uploader's 'AddFile' method via a long string input, leading to EIP overwrite and potential code execution. The PoC uses VBScript to trigger the vulnerability in Internet Explorer.