rapid7/metasploit-framework — pull request #461 by jvazquez-r7 (2012-06-08 16:13:31+00:00)
Title: Added module for CVE-2011-2217

Added module for CVE-2011-2217 "Tom Sawyer Software GET Extension Factory Remote Code Execution"

The vulnerable ActiveX is installed with some versions of vmware infraestructure client. For the module development I've used Embarcadero Technologies ER/Studio XE2 / Embarcadero Studio Portal 1.6 which also install a vulnerable version of the ActiveX control.

ASLR + DEP bypass thanks to msvcr71 installed with the vulnerable software, so no jre needed :)