Exploitation Summary
EIP tracks 3 public exploits for CVE-2007-6530.
PoCs published by Metasploit, Elazar, MC, including Metasploit module exploits/windows/browser/hp_loadrunner_addfolder.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the XUpload ActiveX control (version 2.1.0.1) included in HP LoadRunner 9.0. It achieves remote code execution by passing an overly long string to the AddFolder method.
Description
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in the XUpload ActiveX control (version 2.1.0.1) included in HP LoadRunner 9.0. It achieves remote code execution by passing an overly long string to the AddFolder method.
This exploit targets a buffer overflow vulnerability in Persits Software XUpload Control via the AddFolder() method. It uses a crafted buffer with a specific EIP overwrite and shellcode to achieve remote code execution, demonstrated by launching calc.exe or binding a shell to port 4444.
This Metasploit module exploits a stack buffer overflow in the XUpload ActiveX control (version 2.1.0.1) included in HP LoadRunner 9.0 via the AddFolder method. It delivers a payload to achieve remote code execution on vulnerable Windows systems.