Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

Adobe Illustrator CS4 (V14.0.0) Overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis. An overlong string as DSC comment (more than 42000 bytes) results in a direct EIP overwrite. Exception is first-chance so the program will never crash. At the moment of the redirection EAX and ESI are user-controlled. Tested and working against xp sp3. Usage: php 9sg_illu.php then double-click on the resulting 9sg.eps file it will bind a shell on port 4444 change the shellcode for your needs even