CVE-2009-0323

This exploit targets a stack buffer overflow in Amaya Browser v11 via an overly long string in the 'bdo' tag, allowing arbitrary code execution. It uses a crafted HTTP response with shellcode to trigger the vulnerability.

The advisory describes multiple stack-based buffer overflow vulnerabilities in Amaya web editor versions 11.0 and earlier, exploitable via crafted HTML/XML input. The PoC demonstrates a buffer overflow in the 'type' parameter of an 'input' tag, leading to potential arbitrary code execution.

This Metasploit module exploits a stack buffer overflow in Amaya Browser v11.0 via an overly long string in the 'bdo' tag, allowing arbitrary code execution. The exploit uses SEH overwrites and a crafted payload to achieve RCE.