CVE-2013-7246
EXPLOITED IN THE WILDDaumGame ActiveX Control 1.1.0.4 and 1.1.0.5 - Buffer Overflow via IconCreate Method
Title source: llmExploitation Summary
CVE-2013-7246 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including Trustwave's SpiderLabs.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2013-7246, demonstrating a buffer overflow vulnerability in DaumGame ActiveX (versions 1.1.0.5 and 1.1.0.4) via the 'IconCreate' method. The exploit triggers an SEH overwrite to achieve remote code execution by launching a calculator.
Description
Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014.
Exploits (1)
This is a proof-of-concept exploit for CVE-2013-7246, demonstrating a buffer overflow vulnerability in DaumGame ActiveX (versions 1.1.0.5 and 1.1.0.4) via the 'IconCreate' method. The exploit triggers an SEH overwrite to achieve remote code execution by launching a calculator.