CVE-2007-5779
EXPLOITEDGOM Player 2.1.6.3499 - Buffer Overflow via GomWeb Control OpenUrl Method
Title source: llmExploitation Summary
CVE-2007-5779 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, rgod, MC, including a Metasploit module exploits/windows/browser/gom_openurl.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in GOM Player 2.1.6.3499 via the OpenUrl() method in GomWeb3.dll. It delivers a payload through a malicious HTML page with an embedded ActiveX control.
Description
Buffer overflow in the GomManager (GomWeb Control) ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player (GOM Player) 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in GOM Player 2.1.6.3499 via the OpenUrl() method in GomWeb3.dll. It delivers a payload through a malicious HTML page with an embedded ActiveX control.
This exploit targets a buffer overflow in GOM Player 2.1.6.3499 via the GomWeb Control (GomWeb3.dll 1.0.0.12) by passing more than 506 'A' characters to the OpenUrl method, leading to arbitrary code execution. The PoC includes shellcode to launch calc.exe.
This Metasploit module exploits a stack buffer overflow in GOM Player 2.1.6.3499 via the OpenUrl() method in GomWeb3.dll. It delivers a payload through a malicious HTML page, triggering arbitrary code execution on vulnerable systems.