EIP-2026-117286

This exploit demonstrates a local SEH overwrite vulnerability in HTML Email Creator <= 2.1 build 668 by crafting a malicious HTML file with an oversized 'src' attribute in an <img> tag. The payload includes a structured buffer with NOPs, a jump instruction, a pop-pop-ret address, and Metasploit-generated shellcode to execute 'calc.exe'.