EIP-2026-118942

The exploit demonstrates a buffer overflow and arbitrary file download vulnerability in the NateOn Messenger ActiveX control 'NateonDownloadManager.ocx'. The provided script code can be embedded in malicious HTML to trigger the vulnerability, allowing remote attackers to execute arbitrary code or download files to the victim's system.