what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Microsoft Office 2007 MSO.dll Use-After-Free

Posted Aug 21, 2015

Authored by Google Security Research, scvitti

A crash was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application verified was enabled for testing and reproduction. This sample did not reproduce in Office 2010 running on Windows 7 x86. The attached minimized PoC that produces the crash with 2 bit changes from the original file at offsets 0x11E60 and 0x1515F. Standard office document parsers did not reveal any significance about this location.

tags | exploit, x86

systems | linux, windows

SHA-256 | 64642201e34edd3485b55db10852c7ff6216617108d4d18639058079b398f937

Download | Favorite | View

Related Files

No related files