CVE-2007-4916

This exploit targets a buffer overflow vulnerability in the CFileFind::FindFile method in the MFC library, specifically via the 'hpqutil.dll' ActiveX control. It uses a VBScript to trigger the overflow by passing a long string of 'A' characters to the ListFiles method.

This exploit demonstrates a heap overflow vulnerability in HP's hpqutil.dll (version 2.0.0.138) due to an unsafe lstrcpyA call in the ListFiles function. The PoC triggers the overflow by passing a long string (620 'A's) to the ActiveX control, leading to a crash or potential remote code execution.