EIP-2026-118725

PRE-CVE

Liquid XML Studio 2010 < 8.061970 - 'LtXmlComHelp8.dll OpenFile()' Remote Overflow

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118725. PoCs published by mr_me.

AI-analyzed exploit summary This exploit targets a heap overflow vulnerability in Liquid XML Studio 2010 (LtXmlComHelp8.dll) via the OpenFile() method. It uses a combination of heap spraying and shellcode execution to achieve remote code execution (RCE) on vulnerable systems.

Description

Liquid XML Studio 2010 < 8.061970 - 'LtXmlComHelp8.dll OpenFile()' Remote Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED

by mr_me · htmlremotewindows

https://www.exploit-db.com/exploits/11750

View Code ZIP pw:eip

This exploit targets a heap overflow vulnerability in Liquid XML Studio 2010 (LtXmlComHelp8.dll) via the OpenFile() method. It uses a combination of heap spraying and shellcode execution to achieve remote code execution (RCE) on vulnerable systems.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Liquid XML Studio 2010 <= v8.061970

No auth needed

Prerequisites: Vulnerable version of Liquid XML Studio 2010 installed · Target system must be accessible via a browser

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026