CVE-2012-5946

This Metasploit module exploits a heap-based buffer overflow in the C1Tab ActiveX control (c1sizer.ocx) via the TabCaption property in IBM SPSS SamplePower 3.0. It achieves remote code execution by leveraging heap spraying and ROP chains, targeting IE 6-8 on Windows XP SP3 and Windows 7 SP1.

This Metasploit module exploits a heap-based buffer overflow in the C1Tab ActiveX control (c1sizer.ocx) via the TabCaption property in IBM SPSS SamplePower 3.0. It includes heap spraying, ROP chains, and stack pivoting to achieve remote code execution on vulnerable Windows systems.