CVE-2008-0220

This is a buffer overflow exploit targeting Gateway WebLaunch ActiveX controls (Weblaunch.ocx and Weblaunch2.ocx). It uses heap spraying and two Metasploit-generated shellcodes (calc.exe execution and bind shell) to achieve remote code execution.

This exploit leverages an insecure method in the Gateway Weblaunch ActiveX control to execute arbitrary commands by escaping the temporary directory and launching calc.exe. The vulnerability arises from improper path handling in the DoWebLaunch method.