EIP-2026-117585
PRE-CVEMicrosoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117585. PoCs published by Rick Patel.
AI-analyzed exploit summary The exploit demonstrates a buffer overflow vulnerability in rundll32.exe by passing an excessively long string (499 'A' characters) as a routine name for a module. This triggers a buffer overflow, potentially leading to arbitrary code execution, though exploitation is hindered by Unicode conversion of user-supplied data.
Description
Microsoft Windows XP/2000 - 'RunDLL32.exe' Local Buffer Overflow
Exploits (1)
The exploit demonstrates a buffer overflow vulnerability in rundll32.exe by passing an excessively long string (499 'A' characters) as a routine name for a module. This triggers a buffer overflow, potentially leading to arbitrary code execution, though exploitation is hindered by Unicode conversion of user-supplied data.