CVE-2009-3708

This is a functional exploit for a local buffer overflow vulnerability in Alleycode HTML Editor 2.21. It leverages an SEH overwrite with a crafted HTML file to achieve arbitrary code execution (spawning calc.exe) when the victim opens the file and clicks 'Tools -> Optimizer'.

The exploit demonstrates a buffer overflow vulnerability in AlleyCode HTML Editor version 2.21. By creating an HTML file with an excessively long title tag and triggering the 'Optimizer' tool, the EIP register is overwritten with '41414141' (AAAA), indicating a successful control of execution flow.