CVE-2008-0492
Persits XUpload 3.0.0.4 - Stack-based Buffer Overflow via AddFile Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-0492.
PoCs published by Metasploit, Elazar, jduck, including Metasploit module exploits/windows/browser/hp_loadrunner_addfile.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Persits XUpload ActiveX control (version 3.0.0.3) via the AddFile method. It delivers a payload through a malicious HTML page, leveraging SEH overwrite for arbitrary code execution.
Description
Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and earlier in Persits XUpload 3.0 allows remote attackers to execute arbitrary code via a long argument to the AddFile method. NOTE: some of these details are obtained from third party information.
Exploits (3)
This exploit targets a stack buffer overflow in Persits XUpload ActiveX control (version 3.0.0.3) via the AddFile method. It delivers a payload through a malicious HTML page, leveraging SEH overwrite for arbitrary code execution.
This is a buffer overflow exploit targeting Persits XUpload 3.0 via the AddFile() method. It uses a heap spray technique to execute shellcode, with two payloads (calc.exe and a bind shell) encoded in Alpha2 format.
This Metasploit module exploits a stack buffer overflow in Persits XUpload ActiveX control (version 3.0.0.3) by passing an overly long string to the AddFile method, allowing arbitrary code execution. It uses SEH overwrite techniques and delivers the payload via an HTML page with embedded JavaScript.