CVE-2007-3435
RKD Software BarCodeAx.dll 4.9 - Stack-Based Buffer Overflow via BeginPrint Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-3435.
PoCs published by Metasploit, callAX, including Metasploit module exploits/windows/browser/barcode_ax49.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in RKD Software BarCodeAx.dll v4.9 via an overly long string to the BeginPrint method, leading to arbitrary code execution.
Description
Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allows remote attackers to execute arbitrary code via a long argument.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in RKD Software BarCodeAx.dll v4.9 via an overly long string to the BeginPrint method, leading to arbitrary code execution.
This exploit demonstrates a stack-based buffer overflow in BarCodeAx.dll v. 4.9 via the BeginPrint method, allowing remote code execution. The PoC includes a crafted HTML file with VBScript to trigger the overflow and execute shellcode.
This Metasploit module exploits a stack buffer overflow in RKD Software BarCodeAx.dll v4.9 via an overly long string to the BeginPrint method, allowing arbitrary code execution. It uses a JMP ESP instruction from ws2_32.dll for reliable exploitation.