CVE-2015-0555

This exploit targets a heap spray vulnerability in Samsung iPOLiS 1.12.2 via the ReadConfigValue method of an ActiveX control. It uses a combination of heap spraying and shellcode execution to achieve remote code execution on vulnerable systems.

This is a working proof-of-concept exploit for CVE-2015-0555, targeting a buffer overflow vulnerability in Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX control. The exploit triggers a stack-based buffer overflow via the WriteConfigValue method, leading to an ACCESS_VIOLATION and potential remote code execution.