CVE-2011-5052

This is a Metasploit module exploiting a buffer overflow in StreamDown. It uses SEH overwrite with a hardcoded address (0x10019448) and a NOP sled to execute a reverse shell payload. Tested on Windows XP SP3 and Windows 7 SP1.

This Metasploit module exploits a SEH-based buffer overflow in CoCSoft StreamDown 6.8.0 by sending a crafted HTTP response to trigger memory corruption and execute arbitrary code. The exploit leverages a known return address in DownloadMng.dll to bypass SEH protections.