Microsoft Excel – HFPicture Record Parsing Memory Corruption

• Exploit Database
• 8 阅读

• 作者： Abysssec
  日期： 2010-09-23
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/15088/

• '''
  ________ __ ____ 
   |\/|/ __ \ /\| || |_ \
   | \/ | || | /\ | || | |_) |
   | |\/| | || |/ /\ \| || |_ <(day 23 0day binary anlysis)
   | || | |__| / ____ \ |__| | |_) |
   |_||_|\____/_/\_\____/|____/
  
  '''
   
  Title :Microsoft Excel HFPicture Record Parsing Memory Corruption (0day)
  Version :Excel 2002 SP3
  Analysis:http://www.abysssec.com
  Vendor:http://www.microsoft.com
  Impact:High
  Contact :shahin [at] abysssec.com , info[at] abysssec.com
  Twitter :@abysssec
  CVE :NO CVE
   
  here is BA : http://www.exploit-db.com/moaub-23-microsoft-office-excel-2002-memory-corruption-vulnerability-0day/
  here is the PoC : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15088.zip (moaub-23-excel-poc.zip)