CVE-2012-0158

This is a Metasploit module exploiting a stack buffer overflow in MSCOMCTL.OCX via a malicious RTF file embedding the MSComctlLib.ListViewCtrl.2 ActiveX control. It targets Office 2007 and 2010, using a ROP chain for DEP/ASLR bypass on Office 2010.

This repository contains a proof-of-concept exploit for CVE-2012-0158, demonstrating a remote code execution vulnerability in Microsoft Windows. The exploit uses shellcode to load user32.dll and display a MessageBox, showcasing the ability to execute arbitrary code.

The repository contains only a README.md file with minimal information about an exploit for CVE-2012-0158, mentioning Microsoft Defender detection but no actual exploit code or technical details.

This Metasploit module exploits a stack buffer overflow in MSCOMCTL.OCX via a malicious RTF file embedding a crafted MSComctlLib.ListViewCtrl.2 control, targeting Office 2007 and 2010 with DEP/ASLR bypass techniques.