EIP-2026-117175

PRE-CVE

FormatFactory 3.0.1 - Profile File Handling Buffer Overflow

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117175. PoCs published by Julien Ahrens.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FormatFactory v3.0.1 by crafting a malicious .ini file. It leverages a SafeSEH bypass and executes a calc.exe payload via Shikata Ga Nai-encoded shellcode.

Description

FormatFactory 3.0.1 - Profile File Handling Buffer Overflow

Exploits (1)

exploitdb WORKING POC
by Julien Ahrens · pythonlocalwindows
https://www.exploit-db.com/exploits/22851

This exploit targets a buffer overflow vulnerability in FormatFactory v3.0.1 by crafting a malicious .ini file. It leverages a SafeSEH bypass and executes a calc.exe payload via Shikata Ga Nai-encoded shellcode.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: FormatFactory <= 3.0.1
No auth needed
Prerequisites: Access to write files in the target's %USERPROFILE%\My Documents\FormatFactory\PicCustom directory
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026