CVE-2007-4790
Internet Explorer - Stack-Based Buffer Overflow via FoxDoCmd Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-4790. PoCs published by shinnai.
AI-analyzed exploit summary This exploit demonstrates a remote stack overflow in Microsoft Visual FoxPro 6.0's FPOLE.OCX control via a crafted buffer passed to the FoxDoCmd method. The PoC triggers a crash with a large string of 'b' characters, indicating potential for arbitrary code execution.
Description
Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to execute arbitrary code via a long first argument to the FoxDoCmd function.
Exploits (1)
This exploit demonstrates a remote stack overflow in Microsoft Visual FoxPro 6.0's FPOLE.OCX control via a crafted buffer passed to the FoxDoCmd method. The PoC triggers a crash with a large string of 'b' characters, indicating potential for arbitrary code execution.