CVE-2007-2987
EXPLOITEDZenturi ProgramChecker - Remote Code Execution via DebugMsgLog or DoFileProperties Methods
Title source: llmExploitation Summary
CVE-2007-2987 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, shinnai, MC, including a Metasploit module exploits/windows/browser/zenturiprogramchecker_unsafe.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file download vulnerability in the Zenturi ProgramChecker ActiveX control (sasatl.dll 1.5.0.531) via CVE-2007-2987. It delivers a payload by hosting an HTML page that triggers the vulnerable ActiveX control to download and execute an arbitrary file.
Description
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.
Exploits (4)
This Metasploit module exploits an arbitrary file download vulnerability in the Zenturi ProgramChecker ActiveX control (sasatl.dll 1.5.0.531) via CVE-2007-2987. It delivers a payload by hosting an HTML page that triggers the vulnerable ActiveX control to download and execute an arbitrary file.
This is a working proof-of-concept exploit for a remote buffer overflow vulnerability in Zenturi ProgramChecker ActiveX (sasatl.dll). It leverages a crafted buffer to overwrite EIP and execute shellcode via a heap spray technique.
This exploit leverages a heap spray technique to trigger a buffer overflow in the Zenturi NixonMyPrograms Class (sasatl.dll v. 1.5.0.531) via the Scan() method, executing calc.exe as a payload. The exploit is delivered through a malicious HTML page targeting Internet Explorer.
This Metasploit module exploits an arbitrary file download vulnerability in the Zenturi ProgramChecker ActiveX control (sasatl.dll 1.5.0.531) to place a malicious executable on the target system. It uses a crafted HTML page with JavaScript to trigger the DownloadFile method, delivering a payload EXE to a specified path.