CVE-2007-3071

This exploit leverages a heap spray technique to trigger a buffer overflow in the eSellerateControl350.dll ActiveX component via the 'GetWebStoreURL' method, leading to arbitrary code execution (calc.exe). The payload is embedded in the HTML and executed when the user clicks the button.

This exploit targets a buffer overflow vulnerability in the eSellerate SDK ActiveX control (CVE-2007-3071) by crafting a malicious input string with shellcode to achieve remote code execution. The PoC uses VBScript to trigger the overflow via the GetWebStoreURL method.