Stack-Based Buffer Overflow in Cisco WebEx WebexUCFObject ActiveX Control

This repository contains a single Metasploit module targeting a stack-based buffer overflow vulnerability (CVE-2008-3558) in Cisco WebEx's WebexUCFObject ActiveX control (atucfobj.dll) on Windows. The exploit is delivered via a malicious HTTP server that serves a specially crafted HTML/JavaScript page. When a victim visits the page using Internet Explorer with the vulnerable ActiveX control installed, the exploit triggers a buffer overflow in the 'NewObject' method, using a heap spray to deliver and execute arbitrary shellcode. The module is operational and allows the attacker to run customizable payloads (such as reverse shells) in the context of the victim's browser. The main file is written in Ruby (Metasploit module) and generates obfuscated JavaScript for exploitation. The exploit requires user interaction (visiting a malicious page) and targets a specific version of the WebEx UCF ActiveX control.