Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-2919.
PoCs published by Metasploit, including Metasploit module exploits/windows/browser/ebook_flipviewer_fviewerloading.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in E-BOOK Systems FlipViewer 4.0 via the FViewerLoading ActiveX control's LoadOpf() method. It delivers a payload through a malicious HTML page, achieving remote code execution.
Description
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties.
Exploits (2)
This is a Metasploit module exploiting a stack buffer overflow in E-BOOK Systems FlipViewer 4.0 via the FViewerLoading ActiveX control's LoadOpf() method. It delivers a payload through a malicious HTML page, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in E-BOOK Systems FlipViewer 4.0 via the FViewerLoading ActiveX control's LoadOpf() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability and execute arbitrary code.