CVE-2008-1724

This Metasploit module exploits a stack buffer overflow in the Tumbleweed FileTransfer ActiveX control (vcst_eu.dll) by sending an overly long string to the TransferFile() function, leading to arbitrary code execution.

This Metasploit module exploits a stack buffer overflow in the Tumbleweed FileTransfer ActiveX control (vcst_eu.dll 1.0.0.5) via an overly long string in the TransferFile() function's 'remotefile' parameter. It delivers a payload via an HTTP server hosting a malicious HTML page with embedded JavaScript.

This exploit demonstrates a buffer overflow vulnerability in Tumbleweed SecureTransport FileTransfer ActiveX Control (vcst_en.dll). The PoC triggers a stack overflow via the 'remoteFile' parameter in the TransferFile method, leading to remote code execution under the context of the current user.