CVE-2008-6898
SaschArt SasCam Webcam Server 2.6.5 - Buffer Overflow via XHTTP Module Get Method
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-6898.
PoCs published by Metasploit, blake, callAX, including Metasploit module exploits/windows/fileformat/sascam_get.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the SasCam Webcam Server ActiveX control via the Get() method. It generates an HTML file with malicious JavaScript to trigger the vulnerability and execute arbitrary shellcode.
Description
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Get method and other unspecified methods.
Exploits (4)
This Metasploit module exploits a buffer overflow in the SasCam Webcam Server ActiveX control via the Get() method. It generates an HTML file with malicious JavaScript to trigger the vulnerability and execute arbitrary shellcode.
This exploit targets a vulnerability in an ActiveX control (CLSID: 0297D24A-F425-47EE-9F3B-A459BCE593E3) via a buffer overflow, leveraging SEH overwrite to execute shellcode. The payload is a bind shell on port 4444, tested on Windows XP SP3 with IE7.
This exploit targets a buffer overflow vulnerability in SasCam WebCam Server 2.6.5's XHTTP Module v4.1.0.0. It uses a VBScript payload to trigger a stack-based overflow via an ActiveX control, executing shellcode that opens a reverse shell on port 4444.
This Metasploit module exploits a buffer overflow in the SasCam Webcam Server ActiveX control via the Get() method. It generates an HTML file with malicious JavaScript to trigger the overflow and execute arbitrary shellcode on Windows XP SP3 with IE 7.