EIP-2026-119087

This exploit targets a buffer overflow vulnerability in a registry OCX control (CLSID: 6D5B4E71-625F-11D2-B3AE-00A0C932C7DF) on Windows XP SP3 with IE6/7. It uses a JMP ESP technique to redirect execution to a bind shell payload on port 4444.