[Released Date] 07.16.2007 [Title] EnjoySAP ActiveX Exploit [Vulnerabilty] CVE-2007-3605 [Category] Exploits/Client Side [Platform] Windows [Description] 
This module exploits a vulnerability in the kwedit.dll control included in the EnjoySAP application. The exploit is triggered when the PrepareToPostHTML() method processes a long string argument resulting in a stack-based buffer overflow. This module runs a malicious web site on the CORE IMPACT Console and waits for an unsuspecting user to trigger the exploit by connecting to the web site.