CVE-2008-0955
Creative Software AutoUpdate Engine - Stack-based Buffer Overflow via CacheFolder Property
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-0955.
PoCs published by Metasploit, BitKrush, MC, including Metasploit module exploits/windows/browser/creative_software_cachefolder.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Creative Software AutoUpdate Engine's ActiveX control (CTSUEng.ocx) via the cachefolder() property. It delivers a malicious HTML page with obfuscated JavaScript to trigger the vulnerability and execute arbitrary shellcode.
Description
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
Exploits (3)
This exploit targets a stack buffer overflow in Creative Software AutoUpdate Engine's ActiveX control (CTSUEng.ocx) via the cachefolder() property. It delivers a malicious HTML page with obfuscated JavaScript to trigger the vulnerability and execute arbitrary shellcode.
This is a working proof-of-concept exploit for CVE-2008-0955, targeting a stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control. The exploit uses a long string to overflow the CacheFolder property, leading to SEH overwrite and execution of shellcode that launches calc.exe.
This Metasploit module exploits a stack buffer overflow in Creative Software AutoUpdate Engine via an overly long string to the cachefolder() property of CTSUEng.ocx, allowing arbitrary code execution.