CVE-2009-1534
Microsoft Office Web Components - Remote Code Execution via Crafted Property Values
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1534.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/browser/ms09_043_owc_htmlurl.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Microsoft Office Web Components via an overly long 'HTMLURL' parameter. It achieves remote code execution by leveraging SEH overwrites and is designed for Windows XP SP3 with IE6 and Office XP.
Description
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability."
Exploits (2)
This is a Metasploit module exploiting a buffer overflow in Microsoft Office Web Components via an overly long 'HTMLURL' parameter. It achieves remote code execution by leveraging SEH overwrites and is designed for Windows XP SP3 with IE6 and Office XP.
This Metasploit module exploits a buffer overflow in Microsoft Office Web Components (OWC) via an overly long 'HTMLURL' parameter, leading to arbitrary code execution. It uses SEH overwrites and targets specific versions of Windows XP, IE6, and Office XP.