CVE-2011-2089

This Metasploit module exploits a buffer overflow in ICONICS WebHMI's ActiveX control via the 'SetActiveXGUID' parameter, leading to arbitrary code execution. It uses ROP techniques for IE 8 on Windows XP SP3 and heap spraying for other targets.

This is a working proof-of-concept exploit for CVE-2011-2089, targeting a stack overflow vulnerability in the ICONICS WebHMI ActiveX control (GenVersion.dll). The exploit uses a ROP chain to achieve arbitrary code execution via a crafted JavaScript payload.

This Metasploit module exploits a buffer overflow in ICONICS WebHMI's ActiveX control via the 'SetActiveXGUID' parameter, leading to arbitrary code execution. It uses ROP techniques for specific targets and heap spraying for others.