EIP-2026-118644

This Metasploit module exploits a memory corruption vulnerability in the HP Application Lifecycle Management XGO.ocx ActiveX control via the SetShapeNodeType method, allowing remote code execution through heap spraying and ROP chains. It targets multiple IE versions on Windows XP, Vista, and 7, requiring JRE 6 for DEP/ASLR bypass.