CVE-2007-5107
ask.com ask_toolbar < 4.0.2.53 - Stack-based Buffer Overflow via ShortFormat Property
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-5107.
PoCs published by Metasploit, Joey Mengele, MC, including Metasploit module exploits/windows/browser/ask_shortformat.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Ask.com Toolbar 4.0.2.53 via the 'ShortFormat()' method in askbar.dll. It delivers a payload through an HTTP server hosting malicious HTML/JavaScript.
Description
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar 4.0.2.53 and earlier allows remote attackers to execute arbitrary code via a long ShortFormat property value. NOTE: some of these details are obtained from third party information. NOTE: the researcher claims that this is the same as CVE-2007-5108, but there is insufficient detail for CVE-2007-5108 to be certain.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in Ask.com Toolbar 4.0.2.53 via the 'ShortFormat()' method in askbar.dll. It delivers a payload through an HTTP server hosting malicious HTML/JavaScript.
This exploit leverages a heap spray technique to trigger a buffer overflow in the AskJeevesToolBar ActiveX control, leading to arbitrary code execution. The shellcode launches the system calculator as a demonstration.
This Metasploit module exploits a stack buffer overflow in the Ask.com Toolbar's askBar.dll ActiveX control via the ShortFormat() method. It delivers a crafted HTML page with malicious JavaScript to trigger the overflow and execute arbitrary code.