EIP-2026-119006

The exploit demonstrates an arbitrary file creation/overwrite vulnerability in Oracle AutoVue 20.0.1 via the SaveViewStateToFile() method in the AutoVueX ActiveX control. The PoC shows how an attacker can overwrite files like boot.ini by leveraging the unsafe ActiveX control marked as 'safe for scripting'.