EIP-2026-119209

PRE-CVE

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119209. PoCs published by Metasploit.

AI-analyzed exploit summary This Metasploit module exploits an integer overflow vulnerability in TeeChart Professional ActiveX controls (versions up to 2010.0.0.3) via the AddSeries() property, leading to arbitrary code execution. It includes DEP/ASLR bypass techniques for IE8 on Windows XP and Windows 7 using ROP chains.

Description

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

Exploits (1)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17656

This Metasploit module exploits an integer overflow vulnerability in TeeChart Professional ActiveX controls (versions up to 2010.0.0.3) via the AddSeries() property, leading to arbitrary code execution. It includes DEP/ASLR bypass techniques for IE8 on Windows XP and Windows 7 using ROP chains.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: TeeChart Professional ActiveX Control (TeeChart2010.ocx and earlier versions)
No auth needed
Prerequisites: Victim must visit a malicious webpage hosting the exploit · TeeChart ActiveX control must be installed and vulnerable
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026