CVE-2008-0955

This exploit targets a stack buffer overflow in Creative Software AutoUpdate Engine's ActiveX control (CTSUEng.ocx) via the cachefolder() property. It delivers a malicious HTML page with obfuscated JavaScript to trigger the vulnerability and execute arbitrary shellcode.

This is a working proof-of-concept exploit for CVE-2008-0955, targeting a stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control. The exploit uses a long string to overflow the CacheFolder property, leading to SEH overwrite and execution of shellcode that launches calc.exe.

This Metasploit module exploits a stack buffer overflow in Creative Software AutoUpdate Engine via an overly long string to the cachefolder() property of CTSUEng.ocx, allowing arbitrary code execution.