CVE-2008-3360
IntelliTamper 2.0.7 - Remote Code Execution via Long HREF Attribute in HTML Parser
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-3360. PoCs published by kralor, r0ut3r, Guido Landi.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in IntelliTamper v2.07 and v2.08 Beta 4. It crafts a malicious HTML file with embedded shellcode to achieve remote code execution when the target opens the file.
Description
Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494.
Exploits (4)
This exploit targets a buffer overflow vulnerability in IntelliTamper v2.07 and v2.08 Beta 4. It crafts a malicious HTML file with embedded shellcode to achieve remote code execution when the target opens the file.
This exploit targets a buffer overflow vulnerability in IntelliTamper 2.0.7's HTML parser. It crafts a malicious HTML file containing shellcode and a manipulated EIP to achieve remote code execution (calc.exe).
This exploit leverages a buffer overflow vulnerability in the target software by embedding shellcode within an HTML file. The shellcode is designed to execute arbitrary commands, and the exploit constructs a malicious URL to trigger the overflow.
This exploit generates a maliciously crafted HTML file designed to trigger a buffer overflow in IntelliTamper's HTML parser. The payload consists of a long string of 'A' characters followed by 'B' characters to overwrite EIP, indicating a classic stack-based overflow.