EIP-2026-119311

This exploit targets a buffer overflow vulnerability in XBMC (Kodi) via an overly long filename in the 'takescreenshot' HTTP command. It overwrites the exception handler with a JMP ESP instruction and executes a bind shell payload on port 4444.