Oracle Outside In sccfut dll Buffer Overflow Exploit

A stack-based buffer overflow in Oracle Ouside In library used by ACDSee Canvas, allows an attacker to execute arbitrary code via crafted .XLSX file. This module runs a malicious web server on the Core Impact Console and waits for an unsuspecting user to trigger the exploit by connecting to it.