CVE-2011-2217
Tom Sawyer GET Extension Factory <5.5.2.237 - Memory Corruption
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2217.
PoCs published by Metasploit, Elazar Broad, rgod, juan vazquez, including Metasploit module exploits/windows/browser/tom_sawyer_tsgetx71ex552.
AI-analyzed exploit summary This Metasploit module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control installed with Tom Sawyer GET Extension Factory. It achieves DEP and ASLR bypass using a ROP chain from msvcr71.dll and targets specific versions of Internet Explorer on Windows XP and Windows 7.
Description
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.
Exploits (2)
This Metasploit module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control installed with Tom Sawyer GET Extension Factory. It achieves DEP and ASLR bypass using a ROP chain from msvcr71.dll and targets specific versions of Internet Explorer on Windows XP and Windows 7.
This Metasploit module exploits a remote code execution vulnerability in the tsgetx71ex553.dll ActiveX control due to incorrect initialization in Internet Explorer. It uses a ROP chain to bypass DEP and ASLR, targeting specific versions of Windows and IE.