Exploitation Summary
EIP tracks 4 public exploits for CVE-2008-5492.
PoCs published by Metasploit, r0ut3r, MC, including Metasploit module exploits/windows/browser/verypdf_pdfview.
AI-analyzed exploit summary This exploit targets a heap buffer overflow in the VeryPDF PDFView ActiveX control (CVE-2008-5492) by crafting a malicious HTML page that triggers arbitrary code execution via the OpenPDF method. It uses JavaScript to manipulate memory and deliver a payload.
Description
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX Control allows remote attackers to execute arbitrary code via a long first argument to the OpenPDF method. NOTE: some of these details are obtained from third party information.
Exploits (4)
This exploit targets a heap buffer overflow in the VeryPDF PDFView ActiveX control (CVE-2008-5492) by crafting a malicious HTML page that triggers arbitrary code execution via the OpenPDF method. It uses JavaScript to manipulate memory and deliver a payload.
This exploit targets a heap overflow vulnerability in VeryPDF PDFView OCX ActiveX control (CVE-2008-5492). It triggers the vulnerability by passing a long string of 'A' characters to the OpenPDF method, leading to a crash and potential arbitrary code execution.
This exploit targets a heap buffer overflow in the VeryPDF PDFView ActiveX control by supplying an overly long string to the OpenPDF method, potentially leading to arbitrary code execution or denial-of-service.
This Metasploit module exploits a heap buffer overflow in the VeryPDF PDFView ActiveX control (CVE-2008-5492) by delivering a malicious HTML page that triggers the vulnerability via the OpenPDF method, leading to arbitrary code execution.