CVE-2009-3958
NOS Microsystems getPlus Helper <1.6.2.49 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-3958. PoCs published by superli.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in the ActiveX control (CLSID: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}) by supplying an excessively long string to the 'Service-URL' parameter, leading to remote code execution.
Description
Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in the ActiveX control (CLSID: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}) by supplying an excessively long string to the 'Service-URL' parameter, leading to remote code execution.