Stack-based Buffer Overflow in Tumbleweed SecureTransport Server ActiveX Control

This repository contains a single Metasploit exploit module targeting a stack buffer overflow in the Tumbleweed SecureTransport suite's vcst_eu.dll ActiveX control (version 1.0.0.5). The exploit is delivered via a malicious HTML page served by the attacker's HTTP server. When a victim visits the page using Internet Explorer, the page instantiates the vulnerable ActiveX control and calls its TransferFile() method with a specially crafted, overly long 'remotefile' argument, triggering a buffer overflow and allowing arbitrary code execution. The module supports multiple Windows targets (Windows 2000 and Windows XP) and leverages Metasploit's payload generation and delivery mechanisms. The main attack vector is browser-based, requiring user interaction (visiting the attacker's page). The exploit is operational and can be used to execute arbitrary payloads on vulnerable systems.