EIP-2026-115821

This exploit leverages a buffer overflow vulnerability in Microsoft Windows XP SP2 by passing an excessively long path to cmd.exe via the %COMSPEC% environment variable. The attack attempts to crash the application or potentially execute arbitrary code, though the latter is unconfirmed.