Exploitation Summary
EIP tracks 4 public exploits for CVE-2012-0284.
PoCs published by Metasploit, rgod, Carsten Eiram, juan vazquez, including Metasploit module exploits/windows/browser/cisco_playerpt_setsource_surl.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Cisco Linksys PlayerPT ActiveX control via a crafted sURL argument in the SetSource method, leading to remote code execution. It includes heap spraying techniques and ROP chains for various IE versions and Windows platforms.
Description
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the sURL argument).
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in Cisco Linksys PlayerPT ActiveX control via a crafted sURL argument in the SetSource method, leading to remote code execution. It includes heap spraying techniques and ROP chains for various IE versions and Windows platforms.
This exploit demonstrates a buffer overflow vulnerability in the Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera's PlayerPT ActiveX control. The SetSource() method is exploited by passing an overly long string, leading to a stack-based buffer overflow.
This Metasploit module exploits a stack-based buffer overflow in Cisco Linksys PlayerPT ActiveX control via a crafted 'sURL' argument in the SetSource method, leading to remote code execution. It includes heap spraying techniques and multiple targets for different IE versions and Windows platforms.
This Metasploit module exploits a stack-based buffer overflow in Cisco Linksys PlayerPT ActiveX control via the SetSource method, leading to remote code execution. It includes heap spraying and ROP chain techniques for different IE versions on Windows.