Microsoft Excel – WOPT Record Parsing Heap Memory Corruption

  • 作者: Abysssec
    日期: 2010-09-21
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/15065/
  • '''
    ________ __ ____ 
     |\/|/ __ \ /\| || |_ \
     | \/ | || | /\ | || | |_) |
     | |\/| | || |/ /\ \| || |_ <(day 21 binary analysis)
     | || | |__| / ____ \ |__| | |_) |
     |_||_|\____/_/\_\____/|____/
     
    '''
     
    Title :Microsoft Excel WOPT Record Parsing Heap Memory Corruption
    Version :Excel 2002 SP3
    Analysis:http://www.abysssec.com
    Vendor:http://www.microsoft.com
    Impact:High
    Contact :shahin [at] abysssec.com , info[at] abysssec.com
    Twitter :@abysssec
    CVE :CVE-2010-1248
     
    here is BA : http://www.exploit-db.com/moaub-21-microsoft-excel-wopt-record-parsing-heap-memory-corruption/
    here is the PoC : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15065.rar (moaub-21-exploit.rar)