CVE-2008-0748
Sony AxRUploadServer ActiveX Control 1.0.0.38 - Buffer Overflow via SetLogging Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0748. PoCs published by Elazar, Trancek.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the ImageStation ActiveX control (SonyISUpload.cab 1.0.0.38) by triggering a heap spray and executing shellcode via a maliciously crafted input to the SetLogging method.
Description
Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit targets a buffer overflow vulnerability in the ImageStation ActiveX control (SonyISUpload.cab 1.0.0.38) by triggering a heap spray and executing shellcode via a maliciously crafted input to the SetLogging method.
This is a proof-of-concept exploit for a buffer overflow vulnerability in AxRUploadServer.dll, specifically targeting the SetLogging method in the ez-Upload ActiveX control. The exploit uses a VBScript to trigger the overflow with a long string of 'A's followed by 'B's to control the EIP register.