CVE-2010-0822

This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Excel 2002 by crafting a malformed OBJ record (0x5D) in an .xls file, leading to arbitrary code execution. The exploit leverages specific memory addresses and a call ecx instruction to redirect execution flow.

This exploit generates a malicious Excel file by injecting a shellcode payload into an existing XLS file, targeting a stack overflow vulnerability in Microsoft Excel 2002 and XP (SP3). The shellcode is designed to execute calc.exe, demonstrating arbitrary code execution.

This is a functional exploit for CVE-2010-0822, targeting a vulnerability in Microsoft Office Excel. The exploit generates a malicious Excel file (XLS) that, when opened, executes arbitrary code (calc.exe) via a crafted OLE object.

This Metasploit module exploits a buffer overflow in Microsoft Office Excel 2002 by crafting a malformed OBJ record in an .xls file, leading to arbitrary code execution. It leverages specific memory addresses to control execution flow and execute payloads.