Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-4924.
PoCs published by Metasploit, Dmitriy Evdokimov, sinn3r, including Metasploit module exploits/windows/browser/asus_net4switch_ipswcom.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in ASUS Net4Switch's ipswcom.dll ActiveX control via the CxDbgPrint function, allowing arbitrary code execution under the context of the user.
Description
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in ASUS Net4Switch's ipswcom.dll ActiveX control via the CxDbgPrint function, allowing arbitrary code execution under the context of the user.
This Metasploit module exploits a stack-based buffer overflow in the ASUS Net4Switch ipswcom.dll ActiveX control via the CxDbgPrint function, allowing remote code execution under the context of the user. It uses heap spraying and JavaScript obfuscation to achieve reliable exploitation.