Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2820. PoCs published by KIM Kee-hong.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2007-2820, targeting a buffer overflow vulnerability in KSignSWAT's SWAT_Login() function. It uses heap spraying to achieve arbitrary code execution, specifically launching calc.exe.
Description
Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SWAT_InitEx, (3) SWAT_InitEx2, (4) SWAT_InitEx3, and (5) SWAT_Login functions.
Exploits (1)
This is a proof-of-concept exploit for CVE-2007-2820, targeting a buffer overflow vulnerability in KSignSWAT's SWAT_Login() function. It uses heap spraying to achieve arbitrary code execution, specifically launching calc.exe.