EIP-2026-118163

This exploit leverages a buffer overflow in Word Splash Pro <= 9.5 via a crafted .wsl file, using an egg hunter and shellcode to achieve remote code execution. The SEH overwrite technique is employed with a pop-pop-ret address from CRDE2000.DLL.