CVE-2012-10055

This exploit targets a buffer overflow in ComSndFTP v1.3.7 Beta by sending a crafted username with format string specifiers to overwrite a function pointer, bypass DEP, and execute arbitrary code via ROP chains.

This exploit demonstrates a format string vulnerability in ComSndFTP Server 1.3.7 Beta. By sending a maliciously crafted USER command with format specifiers, it triggers a denial-of-service condition.

This Metasploit module exploits a format string vulnerability in ComSndFTP v1.3.7 Beta by overwriting a hardcoded function pointer in Ws2_32.dll!WSACleanup, bypassing DEP, and executing arbitrary code via a crafted USER command.