CVE-2025-34124

This exploit demonstrates a buffer overflow vulnerability in Heroes of Might and Magic III by embedding malicious shellcode into a map file (.h3m). The exploit targets the game's map parsing functionality to achieve arbitrary code execution via a crafted sprite name.

This Metasploit module exploits a buffer overflow in Heroes of Might and Magic III by embedding malicious data into an uncompressed .h3m map file. The exploit leverages specific gadgets to bypass anticrash mechanisms and execute shellcode via a CALL ESP instruction.