EIP-2026-118131

This exploit targets a local buffer overflow in WinRAR 2.x by crafting a malicious RAR file that overwrites the EIP with a JMP ESP address and executes shellcode to launch cmd.exe. It includes hardcoded addresses for WinXP SP1/SP2.