CVE-2010-3552

This Metasploit module exploits a stack-based buffer overflow in the Sun Java Runtime Environment (JRE) before v6 Update 22 via the 'docbase' parameter in the new plugin component, allowing arbitrary code execution.

This exploit targets a stack-based buffer overflow in Oracle Java 6 (CVE-2010-3552) to achieve remote code execution. It bypasses DEP using a heap spray combined with a ret-into-libc attack to execute shellcode.

This Metasploit module exploits a stack-based buffer overflow in the Sun Java Runtime Environment (JRE) before v6 Update 22. It leverages a vulnerability in the 'docbase' parameter of the 'launchjnlp' functionality to execute arbitrary code via a crafted HTML page.