CVE-2010-20114

This exploit demonstrates a local buffer overflow in VariCAD 2010-2.05 EN via a malicious .DWB file, leveraging a memcpy() overflow to overwrite exception handlers and execute shellcode. The PoC includes shellcode for both a calculator payload and a bind shell.

This Metasploit module exploits a stack-based buffer overflow in VariCAD 2010-2.05 EN via a maliciously crafted DWB file. It leverages SEH overwrites and a universal return address to achieve remote code execution.