EIP-2026-118608

This exploit targets a buffer overflow vulnerability in the GlobalLink ActiveX control (HanGamePluginCn18.HanGamePluginCn18.1) by crafting a malicious buffer to trigger arbitrary code execution (calc.exe) via shellcode. The exploit leverages heap spraying and a long string of 'A's to overwrite the return address.