CVE-2007-5107

This is a Metasploit module exploiting a stack buffer overflow in Ask.com Toolbar 4.0.2.53 via the 'ShortFormat()' method in askbar.dll. It delivers a payload through an HTTP server hosting malicious HTML/JavaScript.

This exploit leverages a heap spray technique to trigger a buffer overflow in the AskJeevesToolBar ActiveX control, leading to arbitrary code execution. The shellcode launches the system calculator as a demonstration.

This Metasploit module exploits a stack buffer overflow in the Ask.com Toolbar's askBar.dll ActiveX control via the ShortFormat() method. It delivers a crafted HTML page with malicious JavaScript to trigger the overflow and execute arbitrary code.