CVE-2008-3558
Cisco WebEx Meeting Manager <20.2008.2606.4919 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-3558.
PoCs published by Metasploit, Guido Landi, Tobias Klein, Elazar Broad, Guido Landi, jduck, including Metasploit module exploits/windows/browser/webex_ucf_newobject.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control via the 'NewObject' method. It uses a heap spray to place the payload in memory and triggers the vulnerability with a long string, leading to remote code execution.
Description
Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.
Exploits (3)
This exploit targets a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control via the 'NewObject' method. It uses a heap spray to place the payload in memory and triggers the vulnerability with a long string, leading to remote code execution.
This exploit targets a heap overflow vulnerability in the ActiveX control (clsid:32E26FD9-F435-4A20-A561-35D4B987CFDC) by spraying the heap with shellcode and triggering the overflow via the NewObject method. It is designed for Internet Explorer 6 on Windows XP SP1.
This Metasploit module exploits a stack-based buffer overflow in WebEx's atucfobj.dll ActiveX control via the 'NewObject' method. It uses a heap spray to bypass input restrictions and achieve remote code execution.