CVEs-PoC/2013/CVE-2013-7246.md

CVE-2013-7246

Description

Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014.

POC

Reference

• http://packetstormsecurity.com/files/124886
• http://seclists.org/fulldisclosure/2014/Jan/132
• http://www.exploit-db.com/exploits/31179

Github

• https://github.com/ARPSyndicate/cve-scores