CVE-2007-2667

DB Software Laboratory VImpX 4.7.3 - Buffer Overflow via LogFile Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2667. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in DB Software Laboratory VImpX ActiveX (VImpX.ocx v. 4.7.3.0) on IE 6, leveraging a crafted 'LogFile' parameter to overwrite EIP and execute shellcode for remote code execution.

Description

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpremotewindows

https://www.exploit-db.com/exploits/3916

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in DB Software Laboratory VImpX ActiveX (VImpX.ocx v. 4.7.3.0) on IE 6, leveraging a crafted 'LogFile' parameter to overwrite EIP and execute shellcode for remote code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: DB Software Laboratory VImpX ActiveX (VImpX.ocx v. 4.7.3.0)

No auth needed

Prerequisites: Victim must be using IE 6 with the vulnerable ActiveX control installed · Attacker must deliver the exploit via a malicious webpage

MITRE ATT&CK