Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4336. PoCs published by h07.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the Microsoft DXMedia SDK 6 ActiveX control via the 'SourceUrl' property. It uses heap spraying to achieve remote code execution by overwriting memory with shellcode that launches calc.exe.
Description
Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6.0.2.827, as packaged in Microsoft DirectX Media 6.0 SDK, allows remote attackers to execute arbitrary code via a long SourceUrl property value.
Exploits (1)
This exploit targets a buffer overflow vulnerability in the Microsoft DXMedia SDK 6 ActiveX control via the 'SourceUrl' property. It uses heap spraying to achieve remote code execution by overwriting memory with shellcode that launches calc.exe.