CVE-2008-4922

This exploit targets a stack buffer overflow in DjVu ActiveX Component (DjVu_ActiveX_MSOffice.dll 3.0) via an overly long string to the ImageURL() property. It generates an HTML file with embedded JavaScript to trigger the vulnerability and execute arbitrary shellcode.

This exploit targets a buffer overflow vulnerability in DjVu ActiveX Control (DjVu_ActiveX_MSOffice.dll) via the ImageURL property. It combines SEH overwrite and heap spraying techniques to achieve remote code execution by executing a calc.exe payload.

This Metasploit module exploits a stack buffer overflow in DjVu ActiveX Component (DjVu_ActiveX_MSOffice.dll 3.0) via an overly long string to the ImageURL() property, allowing arbitrary code execution. It generates an HTML file with obfuscated JavaScript to trigger the vulnerability.