CVE-2007-6493
imesh < 7.1.0.37263 - Remote Code Execution via SetHandler Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-6493. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in iMesh <= 7.1.0.x via the IMWebControl ActiveX component. It uses heap spraying and a crafted value to hijack the ECX register, leading to arbitrary code execution.
Description
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method.
Exploits (2)
This exploit targets a heap overflow vulnerability in iMesh <= 7.1.0.x via the IMWebControl ActiveX component. It uses heap spraying and a crafted value to hijack the ECX register, leading to arbitrary code execution.
This exploit targets a memory corruption vulnerability in iMesh's ActiveX control (CLSID: 7C3B01BC-53A5-48A0-A43B-0C67731134B9) by triggering a heap spray with shellcode to achieve remote code execution. The exploit uses JavaScript and VBScript to manipulate the control's methods (`SetHandler` and `ProcessRequestEx`) to execute arbitrary code.