CVE-2010-2932
BarCodeWiz BarCode 3.29 ActiveX Control - Buffer Overflow via LoadProperties Method
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-2932. PoCs published by Dr_IDE, loneferret.
AI-analyzed exploit summary This exploit leverages a heap spray technique to trigger a vulnerability in Barcodewiz ActiveX control (CVE-2010-2932), leading to arbitrary code execution (calc.exe) on Windows XP SP3 with IE6/IE7. The shellcode is embedded in the HTML and executed via JavaScript manipulation of the ActiveX object.
Description
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument to the LoadProperties method.
Exploits (3)
This exploit leverages a heap spray technique to trigger a vulnerability in Barcodewiz ActiveX control (CVE-2010-2932), leading to arbitrary code execution (calc.exe) on Windows XP SP3 with IE6/IE7. The shellcode is embedded in the HTML and executed via JavaScript manipulation of the ActiveX object.
This exploit targets a buffer overflow vulnerability in BarCodeWiz Barcode ActiveX Control 3.29 via the LoadProperties method. It uses a SEH-based exploit with shellcode to execute calc.exe, demonstrating remote code execution.
This is a proof-of-concept exploit for CVE-2010-2932, targeting a SEH overflow vulnerability in BarCodeWiz Barcode ActiveX Control 3.29 via the LoadProperties method. The exploit uses a buffer overflow to overwrite the SEH handler, demonstrating potential for arbitrary code execution.