CVE-2008-3704

This exploit targets a stack buffer overflow in the Msmask32.ocx ActiveX control in Microsoft Visual Studio 6.0. It delivers a malicious HTML page with JavaScript that triggers the vulnerability via a crafted 'Mask' parameter, leading to arbitrary code execution.

This exploit targets a buffer overflow vulnerability in the MSMASK32.OCX ActiveX control (CVE-2008-3704) by crafting a malicious 'Mask' parameter to trigger arbitrary code execution. It uses heap spraying and shellcode (Alpha2-encoded) to spawn a calculator (calc.exe) as a proof-of-concept.

This exploit targets a buffer overflow vulnerability in the Microsoft DirectShow 'Mask' parameter. It uses a long string of unescaped characters to trigger the overflow, potentially leading to arbitrary code execution.

This Metasploit module exploits a stack buffer overflow in Microsoft Visual Studio 6.0's Mdmask32.ocx ActiveX control via a crafted 'Mask' parameter. It delivers a reverse TCP shell payload through a malicious HTML page with obfuscated JavaScript.