CVE-2007-3071
eSellerate SDK 3.6.5.0 - Buffer Overflow via GetWebStoreURL ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-3071. PoCs published by metacom, shinnai.
AI-analyzed exploit summary This exploit leverages a heap spray technique to trigger a buffer overflow in the eSellerateControl350.dll ActiveX component via the 'GetWebStoreURL' method, leading to arbitrary code execution (calc.exe). The payload is embedded in the HTML and executed when the user clicks the button.
Description
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.
Exploits (2)
This exploit leverages a heap spray technique to trigger a buffer overflow in the eSellerateControl350.dll ActiveX component via the 'GetWebStoreURL' method, leading to arbitrary code execution (calc.exe). The payload is embedded in the HTML and executed when the user clicks the button.
This exploit targets a buffer overflow vulnerability in the eSellerate SDK ActiveX control (CVE-2007-3071) by crafting a malicious input string with shellcode to achieve remote code execution. The PoC uses VBScript to trigger the overflow via the GetWebStoreURL method.