Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-1724.
PoCs published by Metasploit, Patrick Webster, including Metasploit module exploits/windows/browser/tumbleweed_filetransfer.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in the Tumbleweed FileTransfer ActiveX control (vcst_eu.dll 1.0.0.5) via an overly long string in the TransferFile() function's 'remotefile' parameter. It delivers a payload via an HTTP server hosting a malicious HTML page with embedded JavaScript.
Description
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in the Tumbleweed FileTransfer ActiveX control (vcst_eu.dll 1.0.0.5) via an overly long string in the TransferFile() function's 'remotefile' parameter. It delivers a payload via an HTTP server hosting a malicious HTML page with embedded JavaScript.
This exploit demonstrates a buffer overflow vulnerability in Tumbleweed SecureTransport FileTransfer ActiveX Control (vcst_en.dll). The PoC triggers a stack overflow via the 'remoteFile' parameter in the TransferFile method, leading to remote code execution under the context of the current user.
This Metasploit module exploits a stack buffer overflow in the Tumbleweed FileTransfer ActiveX control (vcst_eu.dll) by sending an overly long string to the TransferFile() function, leading to arbitrary code execution.