EIP-2026-118165
PRE-CVEWordtrainer 3.0 - '.ord' Local Buffer Overflow (Metasploit)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118165. PoCs published by James Fitts.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in WordTrainer v3.0 via a maliciously crafted .ORD file. It leverages a 'call esp' instruction at 0x00430363 to execute arbitrary payloads, with a payload space of 1500 bytes and specific bad characters excluded.
Description
Wordtrainer 3.0 - '.ord' Local Buffer Overflow (Metasploit)
Exploits (1)
This Metasploit module exploits a stack-based buffer overflow in WordTrainer v3.0 via a maliciously crafted .ORD file. It leverages a 'call esp' instruction at 0x00430363 to execute arbitrary payloads, with a payload space of 1500 bytes and specific bad characters excluded.