Exploitation Summary
EIP tracks 3 public exploits for CVE-2012-4876.
PoCs published by Metasploit, rgod, rgod, sinn3r, including Metasploit module exploits/windows/browser/ultramjcam_openfiledig_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in TRENDnet SecurView Internet Camera's ActiveX control via the OpenFileDlg() function, leading to arbitrary code execution. The exploit uses heap spraying and a long string to trigger the overflow.
Description
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.
Exploits (3)
This Metasploit module exploits a buffer overflow in TRENDnet SecurView Internet Camera's ActiveX control via the OpenFileDlg() function, leading to arbitrary code execution. The exploit uses heap spraying and a long string to trigger the overflow.
This exploit targets a stack-based buffer overflow in the TRENDnet SecurView TV-IP121WN camera's ActiveX control via the OpenFileDlg method. The overflow is triggered by an insecure WideCharToMultiByte call, allowing arbitrary code execution through a crafted JavaScript payload.
This Metasploit module exploits a buffer overflow vulnerability in TRENDnet SecurView Internet Camera's ActiveX control via the OpenFileDlg() function. It leverages a long string in the sFilter argument to trigger a stack overflow, leading to arbitrary code execution.