EIP-2026-118782

This exploit targets a buffer overflow vulnerability in Microsoft DirectSpeechSynthesis Module (XVoice.dll 4.0.4.3303) via a heap spray technique in Internet Explorer 7 on Windows XP SP2. It uses a maliciously crafted HTML file with JavaScript to trigger the overflow and execute arbitrary shellcode.