rapid7/metasploit-framework — pull request #271 by noperand (2012-03-25 07:30:06+00:00)
Title: Exploit Module for CVE-2008-0610

Ran msftidy on this just in case but the code is really short; no problems. Overwrites SEHandler to achieve execution control; really basic (but also not the most efficient) stack smash. Tested thoroughly on a Windows XP SP3 target. Works good all around, including Meterpreter staging and all.

Looking forward to seeing some of you this week at ISSW and AHA!

-noperand

[1] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-0610
[2] http://www.securityfocus.com/bid/27561/info
[3] http://osvdb.org/show/osvdb/42840