EIP-2026-118323

PRE-CVE

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118323. PoCs published by mr_me.

AI-analyzed exploit summary This exploit targets an integer overflow and dereference vulnerability in Black Ice Fax Voice SDK v12.6 ActiveX control. It uses a heap spray technique to achieve reliable code execution via the `GetItemQueue` method, triggering a controlled memory corruption.

Description

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

Exploits (1)

exploitdb WORKING POC VERIFIED

by mr_me · htmlremotewindows

https://www.exploit-db.com/exploits/17416

View Code ZIP pw:eip

This exploit targets an integer overflow and dereference vulnerability in Black Ice Fax Voice SDK v12.6 ActiveX control. It uses a heap spray technique to achieve reliable code execution via the `GetItemQueue` method, triggering a controlled memory corruption.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Black Ice Fax Voice SDK v12.6

No auth needed

Prerequisites: Victim must visit a malicious webpage using Internet Explorer 6/7 · ActiveX control must be installed and not killed via KillBit

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026