EIP-2026-118961
PRE-CVENewv SmartClient 1.1.0 - 'NewvCommon.ocx' ActiveX Control Multiple Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118961. PoCs published by wsn1983.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in the Newv SmartClient ActiveX control, including arbitrary command execution via the RunCommand method and a stack-based buffer overflow in the WriteTextFile function. The provided PoC code shows how an attacker can execute arbitrary commands (e.g., calc.exe) or trigger a buffer overflow leading to potential code execution.
Description
Newv SmartClient 1.1.0 - 'NewvCommon.ocx' ActiveX Control Multiple Vulnerabilities
Exploits (1)
The exploit demonstrates multiple vulnerabilities in the Newv SmartClient ActiveX control, including arbitrary command execution via the RunCommand method and a stack-based buffer overflow in the WriteTextFile function. The provided PoC code shows how an attacker can execute arbitrary commands (e.g., calc.exe) or trigger a buffer overflow leading to potential code execution.