rapid7/metasploit-framework — pull request #486 by wchen-r7 (2012-06-14 14:57:46+00:00)
Title: Add CVE-2012-2915 exploit - Lattice Semiconductor PAC-Designer

This module exploits a vulnerability found in Lattice Semiconductor PAC-Designer 6.21. When supplying a long string of data to the 'value' field under the 'SymbolicSchematicData' tag, it is possible to cause a memory corruption on the stack, which results in arbitrary code execution under the context of the user.