CVE-2008-1472

This is a Metasploit module exploiting a stack-based buffer overflow in the CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) via the AddColumn() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability.

This exploit targets a buffer overflow vulnerability in CA BrightStor ARCserve Backup r11.5 via the AddColumn() method in the ListCtrl.ocx ActiveX control. It uses a heap spray technique to achieve remote code execution by overwriting memory with shellcode.

This Metasploit module exploits a stack-based buffer overflow in the CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) via the AddColumn() method. It delivers a malicious HTML page with obfuscated JavaScript to trigger the overflow and execute arbitrary code.