two examples, for Metasploit Framwork , using the MS02-039 and the MS02-056 vulnerabilities . MS02-039 / CVE-2002-0649 Return address/Writable Address (Re)searching for alternatives for MS02-039 vulnerability , there are some new (unused) return addresses and writable addresses available, within SQLSORT.DLL , as following: Return Address : 0x42b04488 , 0x42b0c9dc ( sql2.cpp