Exploitation Summary
EIP tracks 4 public exploits for CVE-2009-4265.
PoCs published by Metasploit, dookie, Dr_IDE, including Metasploit module exploits/windows/fileformat/ideal_migration_ipj.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in PointDev IDEAL Migration and IDEAL Administration via a maliciously crafted .ipj file. It leverages a CALL EBP instruction to achieve arbitrary code execution on vulnerable Windows systems.
Description
Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary code via a long Computer value in an .ipj project file.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in PointDev IDEAL Migration and IDEAL Administration via a maliciously crafted .ipj file. It leverages a CALL EBP instruction to achieve arbitrary code execution on vulnerable Windows systems.
This Metasploit module exploits a stack-based buffer overflow in IDEAL Administration v9.7 via a maliciously crafted .ipj file. It leverages a SEH overwrite with a universal return address (0x10010F2E) and includes a NOP sled followed by encoded payload execution.
This exploit targets a local buffer overflow in IDEAL Administration 2009 v9.7 by crafting a malicious .ipj file. It overwrites EIP with a JMP ESP instruction from SHELL32.DLL and executes a shell_bind_tcp payload.
This Metasploit module exploits a stack buffer overflow in IDEAL Migration and IDEAL Administration by crafting a malicious .ipj file. It leverages a CALL EBP or JMP ESP instruction to redirect execution to the payload, achieving remote code execution.