CVE-2008-0220
Gateway Weblaunch 1.0.0.1 - Stack-Based Buffer Overflow via DoWebLaunch Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0220. PoCs published by Elazar.
AI-analyzed exploit summary This is a buffer overflow exploit targeting Gateway WebLaunch ActiveX controls (Weblaunch.ocx and Weblaunch2.ocx). It uses heap spraying and two Metasploit-generated shellcodes (calc.exe execution and bind shell) to achieve remote code execution.
Description
Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allow remote attackers to execute arbitrary code via a long string in the (1) second or (2) fourth argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.
Exploits (2)
This is a buffer overflow exploit targeting Gateway WebLaunch ActiveX controls (Weblaunch.ocx and Weblaunch2.ocx). It uses heap spraying and two Metasploit-generated shellcodes (calc.exe execution and bind shell) to achieve remote code execution.
This exploit leverages an insecure method in the Gateway Weblaunch ActiveX control to execute arbitrary commands by escaping the temporary directory and launching calc.exe. The vulnerability arises from improper path handling in the DoWebLaunch method.