Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-4225.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/fileformat/etrust_pestscan.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in CA eTrust PestPatrol's ActiveX control (ppctl.dll 5.6.7.9) via an overly long string passed to the Initialize() property, leading to arbitrary code execution.
Description
Stack-based buffer overflow in the PestPatrol ActiveX control (ppctl.dll) 5.6.7.9 in CA eTrust PestPatrol allows remote attackers to execute arbitrary code via a long argument to the Initialize method.
Exploits (2)
This exploit targets a stack buffer overflow in CA eTrust PestPatrol's ActiveX control (ppctl.dll 5.6.7.9) via an overly long string passed to the Initialize() property, leading to arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in CA eTrust PestPatrol's ActiveX control (ppctl.dll 5.6.7.9) via an overly long string to the Initialize() property, leading to arbitrary code execution.