CVE-2010-2590

This Metasploit module exploits a heap-based buffer overflow in Crystal Reports' CrystalPrintControl ActiveX via the ServerResourceVersion property, achieving remote code execution on vulnerable systems. It uses ROP techniques to bypass DEP/ASLR and targets IE 6-8 on Windows XP/7.

This exploit targets a buffer overflow vulnerability in Crystal Reports Viewer 12.0.0.549 ActiveX control (PrintControl.dll) via the ServerResourceVersion method. It uses a heap spray technique to achieve remote code execution, specifically launching calc.exe as a payload.

This Metasploit module exploits a heap-based buffer overflow in Crystal Reports' CrystalPrintControl ActiveX via the ServerResourceVersion property. It uses ROP chains and heap spraying to achieve remote code execution on vulnerable systems.