Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-4195.
PoCs published by Metasploit, dookie, pyrokinesis, including Metasploit module exploits/windows/fileformat/adobe_illustrator_v14_eps.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Adobe Illustrator CS4 v14.0.0 via a malformed Encapsulated Postscript (.eps) file. It leverages an overlong DSC comment to trigger a SEH-based exploit, delivering a payload encoded with alphanumeric upper encoding.
Description
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.
Exploits (4)
This exploit targets a buffer overflow vulnerability in Adobe Illustrator CS4 v14.0.0 via a malformed Encapsulated Postscript (.eps) file. It leverages an overlong DSC comment to trigger a SEH-based exploit, delivering a payload encoded with alphanumeric upper encoding.
This is a Metasploit module exploiting a buffer overflow in Adobe Illustrator CS4 v14.0.0 via a malformed Encapsulated Postscript (.eps) file. The exploit leverages an overlong DSC Comment to trigger a SEH-based overflow, achieving remote code execution.
This exploit targets a buffer overflow vulnerability in Adobe Illustrator CS4 (V14.0.0) via an overlong DSC comment in an EPS file, leading to EIP overwrite and arbitrary code execution. It includes shellcode for adding a user or binding a shell on port 4444.
This Metasploit module exploits a buffer overflow vulnerability in Adobe Illustrator CS4 v14.0.0 via a malformed Encapsulated Postscript (.eps) file. The exploit leverages an overlong DSC Comment to trigger a SEH-based overflow, allowing arbitrary code execution.