Exploitation Summary
EIP tracks 8 public exploits for CVE-2009-0133.
PoCs published by Metasploit, Encrypt3d.M!nd, SkD, including Metasploit module exploits/windows/fileformat/hhw_hhp_indexfile_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in HTML Help Workshop 4.74 by crafting a malicious .hhp project file with an oversized 'Index file' field, leading to arbitrary code execution via an egghunter technique.
Description
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
Exploits (8)
This Metasploit module exploits a stack buffer overflow in HTML Help Workshop 4.74 by crafting a malicious .hhp project file with an oversized 'Index file' field, leading to arbitrary code execution via an egghunter technique.
This exploit targets a buffer overflow vulnerability in HTML Help Workshop 4.74 by crafting a malicious .hhp project file. It uses an egg-hunting technique to locate and execute shellcode, which spawns a calculator as a proof-of-concept payload.
This is a functional exploit for a buffer overflow vulnerability in Microsoft HTML Workshop <= 4.74. It uses a custom shellhunter technique to locate and execute shellcode reliably across different Windows versions.
This exploit demonstrates a buffer overflow vulnerability in Microsoft HTML Help Workshop by crafting a malicious .hhp file with an overflow in the 'Compiled file' field, leading to arbitrary code execution when the file is opened.
This exploit leverages a buffer overflow in Microsoft HTML Help Workshop by crafting a malicious .hhp file with an oversized 'Contents file' field, overwriting EIP with a 'jmp esp' address and executing a bind shell payload.
This exploit leverages a stack overflow vulnerability in Windows HTML Help Workshop by crafting a malicious .hhp file with an oversized 'Index File' field. The payload includes a NOP sled and shellcode to achieve arbitrary code execution.
This exploit targets CVE-2009-0133, a buffer overflow vulnerability in Microsoft Office Word. The PoC uses a maliciously crafted .rtf file with an overly long 'Compatibility' field to trigger a stack-based buffer overflow, potentially leading to arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in HTML Help Workshop 4.74 via a crafted .hhp file, using an egghunter to achieve remote code execution.