CVE-2010-0805

This Metasploit module exploits a memory corruption vulnerability in the Internet Explorer Tabular Data Control ActiveX (CVE-2010-0805) by overflowing the 'DataURL' parameter to execute arbitrary code via heap spraying and shellcode injection.

This exploit triggers a stack-based buffer overflow in the DataURL parameter of the ActiveX control (clsid:333C7BC4-460F-11D0-BC04-0080C7055A83) by providing an excessively long string, leading to arbitrary code execution. The vulnerability is in the handling of the DataURL parameter, allowing memory corruption.

This Metasploit module exploits a memory corruption vulnerability in the Internet Explorer Tabular Data ActiveX Control (CVE-2010-0805) by writing a NUL byte outside array bounds via a long 'DataURL' parameter, leading to arbitrary code execution.