CVE-2008-4547

dvrstation_cms - Heap-based Buffer Overflow via TimeSpanFormat Method

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4547. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) via a malicious HTML file. It uses a long string to overflow the heap and execute shellcode, achieving remote code execution on systems with IE7 and XP SP2.

Description

Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to execute arbitrary code via a long second argument to the TimeSpanFormat method.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · htmlremotewindows

https://www.exploit-db.com/exploits/4903

View Code ZIP pw:eip

This exploit targets a heap overflow vulnerability in NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) via a malicious HTML file. It uses a long string to overflow the heap and execute shellcode, achieving remote code execution on systems with IE7 and XP SP2.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25)

No auth needed

Prerequisites: Victim must visit a malicious webpage using Internet Explorer 7 on Windows XP SP2 · PdvrAtl.PdvrOcx.1 ActiveX control must be installed

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →