CVE-2008-0748

This exploit targets a buffer overflow vulnerability in the ImageStation ActiveX control (SonyISUpload.cab 1.0.0.38) by triggering a heap spray and executing shellcode via a maliciously crafted input to the SetLogging method.

This is a proof-of-concept exploit for a buffer overflow vulnerability in AxRUploadServer.dll, specifically targeting the SetLogging method in the ez-Upload ActiveX control. The exploit uses a VBScript to trigger the overflow with a long string of 'A's followed by 'B's to control the EIP register.