Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-1681.
PoCs published by Metasploit, Abysssec, Unknown, including Metasploit module exploits/windows/fileformat/visio_dxf_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.
Description
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.
This Python script generates a malicious DXF file that exploits a stack-based buffer overflow in Microsoft Office Visio 2002 (CVE-2010-1681). It crafts a payload with shellcode, a jump to ESP, and a controlled EIP overwrite to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.