EIP-2026-114910

The exploit demonstrates a buffer overflow vulnerability in the AOL downloadUpdater2 Firefox plugin (npdnupdater2.dll v1.3.0.0) via an overlong 'SRC' parameter in an HTML embed tag. The PoC shows EIP control and a crash dump, with disassembly revealing the vulnerable copy loop and call to user-controlled memory.