Home page logo
/

bugtraq logo Bugtraq mailing list archives

About the latest three Powerpoint vulnerabilities: exploitable?
From: ewt () telecomitalia it
Date: 18 Jul 2006 13:02:08 -0000

We have analyzed the three proof-of-concept documents recently posted on the mailing list, and they don't appear 
exploitable to us. Specifically:
 - powerpnt.exe: NULL pointer dereference, unusable. Are we missing anything?
 - memory corruption: we apparently control the address, but not the contents written to it. Doesn't appear usable
 - mso.dll: this didn't work for us. We see an integer overflow exception being raised with RaiseException, followed by 
a C++ exception, but no apparent side effects. PowerPoint complains, but closes cleanly and works fine thereafter

Is any of the three supposed to go beyond a local DoS? anyone else has analyzed them?


  By Date           By Thread  

Current thread:
  • About the latest three Powerpoint vulnerabilities: exploitable? ewt (Jul 18)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault