2007/05/01

MoAxB #01: PowerPointViewer.ocx 3.1 multiple methods DoS

well, let's start the MoAxB with a DoS. This component allows you to visualize, create and modify ppt files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.

Online demonstration

Text format

This is the content of registers when the crash happens:

EAX 000EC484
ECX 01642A38
EDX 00000000
EBX 0173EA5C
ESP 0173EA30
EBP 0173EC68
ESI 000F4241
EDI 039E0024 UNICODE "AAA..."

EIP 77527420 ole32.77527420

77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH

25 comments:

game gold said...

Without thinking I buy some Tales Of Pirates gold , it is very interesting. I use some Tales Of Pirates money and want to find a good group. We often buy cheap Tales Of Pirates gold on Monday. As if it is a rule. I think it is the real friendship. buy Tales Of Pirates Gold is already become the essential thing. So I will introduce my friends have it.

chenlu said...

runescape money
runescape gold
runescape money
runescape gold

dpanupam said...

Thanku for your information. Web Designer

buy wow gold said...

When Wow Gold wolf finally found the wow gold cheap hole in the chimney he crawled cheap wow gold down and KERSPLASH right into that kettle of water and that was cheapest wow gold the end of his troubles with the big bad wolf.
game4power.
The next day the Buy Wow Goldlittle pig invited hisbuy gold wow mother over . She said "You see it is just as mygamegoldI told you. The way to get along in the world is to do world of warcraft gold things as well as you can." Fortunately for that little pig, he buy cheap wow gold learned that lesson. And he just k4gold lived happily ever after!.

coco0610 said...

wholesale jewelry
handmade jewelry
jewelry wholesale
fashion jewelry
costume jewelry
wholesale costume jewelry
wholesale fashion jewelry
wholesale pearl
wholesale crystal
discount jewelry
cheap jewelry

fshfghsf said...

看房子,買房子,建商自售,自售,台北新成屋,台北豪宅,新成屋,豪宅,美髮儀器,美髮,儀器,髮型,EMBA,MBA,學位,EMBA,專業認證,認證課程,博士學位,DBA,PHD,在職進修,碩士學位,推廣教育,DBA,進修課程,碩士學位,網路廣告,關鍵字廣告,關鍵字,課程介紹,學分班,文憑,牛樟芝,段木,牛樟菇,日式料理, 台北居酒屋,日本料理,結婚,婚宴場地,推車飲茶,港式點心,尾牙春酒,台北住宿,國內訂房,台北HOTEL,台北婚宴,飯店優惠,台北結婚,場地,住宿,訂房,HOTEL,飯店,造型系列,學位,牛樟芝,腦磷脂,磷脂絲胺酸,SEO,婚宴,捷運,學區,美髮,儀器,髮型,牛樟芝,腦磷脂,磷脂絲胺酸,看房子,買房子,建商自售,自售,房子,捷運,學區,台北新成屋,台北豪宅,新成屋,豪宅,學位,碩士學位,進修,在職進修, 課程,教育,學位,證照,mba,文憑,學分班,網路廣告,關鍵字廣告,關鍵字,SEO,关键词,网络广告,关键词广告,SEO,关键词,网络广告,关键词广告,SEO,台北住宿,國內訂房,台北HOTEL,台北婚宴,飯店優惠,住宿,訂房,HOTEL,飯店,婚宴,台北住宿,國內訂房,台北HOTEL,台北婚宴,飯店優惠,住宿,訂房,HOTEL,飯店,婚宴,台北住宿,國內訂房,台北HOTEL,台北婚宴,飯店優惠,住宿,訂房,HOTEL,飯店,婚宴,結婚,婚宴場地,推車飲茶,港式點心,尾牙春酒,台北結婚,場地,結婚,場地,推車飲茶,港式點心,尾牙春酒,台北結婚,婚宴場地,結婚,婚宴場地,推車飲茶,港式點心,尾牙春酒,台北結婚,場地,居酒屋,燒烤,美髮,儀器,髮型,美髮,儀器,髮型,美髮,儀器,髮型,美髮,儀器,髮型,小套房,小套房,進修,在職進修,留學,證照,MBA,EMBA,留學,MBA,EMBA,留學,進修,在職進修,牛樟芝,段木,牛樟菇,關鍵字排名,網路行銷,关键词排名,网络营销,網路行銷,關鍵字排名,关键词排名,网络营销,PMP,在職專班,研究所在職專班,碩士在職專班,PMP,證照,在職專班,研究所在職專班,碩士在職專班,SEO,廣告,關鍵字,關鍵字排名,網路行銷,網頁設計,網站設計,網站排名,搜尋引擎,網路廣告,SEO,廣告,關鍵字,關鍵字排名,網路行銷,網頁設計,網站設計,網站排名,搜尋引擎,網路廣告,SEO,廣告,關鍵字,關鍵字排名,網路行銷,網頁設計,網站設計,網站排名,搜尋引擎,網路廣告,SEO,廣告,關鍵字,關鍵字排名,網路行銷,網頁設計,網站設計,網站排名,搜尋引擎,網路廣告,EMBA,MBA,PMP
,在職進修,專案管理,出國留學,EMBA,MBA,PMP
,在職進修,專案管理,出國留學,EMBA,MBA,PMP
,在職進修,專案管理,出國留學,婚宴,婚宴,婚宴,婚宴

住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,住宿,民宿,飯宿,旅遊,美容,美髮,整形,造型,美容,美髮,整形,造型,美容,美髮,整形,造型,美容,美髮,整形,造型,美容,美髮,整形,造型,美容,美髮,整形,造型,美容,美髮,整形,造型,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,設計,室內設計,裝潢,房地產,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,進修,在職進修,MBA,EMBA,住宿,民宿,飯店,旅遊,美容,美髮,整形,造型,設計,室內設計,裝潢,房地產,進修,在職進修,MBA,EMBA,羅志祥,周杰倫,五月天,蔡依林,林志玲,羅志祥,周杰倫,五月天,蔡依林,林志玲,羅志祥,周杰倫,五月天,蔡依林,羅志祥,周杰倫,五月天,蔡依林

wow gold said...

wow goldwow goldwow accountwow gold

nasha said...

Why was there no follow on bankruptcy then? The bailout of AIG FP went to (wow power leveling) hedge funds that bound credit swaps on Lehman failing or others betting on rating (wow power leveling) declines. AIG has drained over 100 billion from the government. Which had to go to (wow power leveling) those who bet on failures and downgrades. Many of whom (power leveling)were hedge funds. I-banks that had offsetting swaps needed the money from the AIG bailout or they would have been caught. Its an (wow powerleveling) insiders game and it takes just a little bit too much time for most people to think (wow gold) through where the AIG 100 billion bailout money went to, hedge funds and players, many of whom hire from the top ranks of DOJ, Fed, Treasury, etc. ZHANG XIAO CHEN

J&D said...

網頁設計,情趣用品,情趣用品,情趣用品,情趣用品
色情遊戲,寄情築園小遊戲,情色文學,一葉情貼圖片區,情惑用品性易購,情人視訊網,辣妹視訊,情色交友,成人論壇,情色論壇,愛情公寓,情色,舊情人,情色貼圖,色情聊天室,色情小說,做愛,做愛影片,性愛

免費視訊聊天室,aio交友愛情館,愛情公寓,一葉情貼圖片區,情色貼圖,情色文學,色情聊天室,情色小說,情色電影,情色論壇,成人論壇,辣妹視訊,視訊聊天室,情色視訊,免費視訊,免費視訊聊天,視訊交友網,視訊聊天室,視訊美女,視訊交友,視訊交友90739,UT聊天室,聊天室,豆豆聊天室,尋夢園聊天室,聊天室尋夢園,080聊天室,080苗栗人聊天室,女同志聊天室,上班族聊天室,小高聊天室 

AV,AV女優
視訊,影音視訊聊天室,視訊交友
視訊,影音視訊聊天室,視訊聊天室,視訊交友,視訊聊天,視訊美女

. said...

酒店經紀PRETTY GIRL 台北酒店經紀人 ,禮服店 酒店兼差PRETTY GIRL酒店公關 酒店小姐 彩色爆米花酒店兼職,酒店經紀, 酒店上班,酒店工作 PRETTY GIRL酒店喝酒酒店上班 彩色爆米花台北酒店酒店小姐 PRETTY GIRL酒店上班酒店打工PRETTY GIRL酒店打工酒店經紀 彩色爆米花

雪花 said...

福~
「朵
語‧,最一件事,就。好,你西...............................................................................................................................-...相互
,以讓>它使...................

Replica Watches said...

24371833691754917475 As we Last Chaos Gold announced shortly Replica Watches after his Replica Cartier Watches tragic Replica Rolex Watches death, the Swedish LastChaos Gold studio GRIN secretly Replica Watch developing a Replica Chanel Watches spin-off of the Replica Swiss Watches legendary Final Exact Replica Graham Watch Fantasy Replica Montblanc Watches series Swiss Replica Watches from Square Enix. Replica Breguet Watches According to concept art leaks Replica Breitling Watches on the canvas, then Replica BRM Watch canceled the Tag Heuer Replica Watch title was called Replica IWC Watch Final Fantasy Last Chaos Gold Fortress.

berklingaly said...

徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信

anran said...

Your blog is very good, it's the best blog I've ever seen, thank you!
By the way, do you like polo shirts, which are very chic, especially the polo t shirts, I love them very much. I also like playing tennis rackets, it can keep healthy, what do you like to do?
polo t shirts women
polo t shirts on sale
polo t shirts for women
polo shirts on sale
polo shirts men
men's polo shirt
men polo shirt
mens polo shirts
mens polo shirt
cheap polo shirts
discount polo shirts
men's polo shirts
women's polo shirts
cheap tennis racket
discount tennis racket
prince tennis racquet
head tennis rackets
wilson tennis racket
babolat tennis racquet

naomi said...

情趣,情趣,情趣用品,情趣用品,情趣商品,情趣商品,按摩棒,跳蛋,情趣按摩棒,充氣娃娃,保險套,飛機杯,潤滑液,情趣內衣,性感內衣,g點,持久液,按摩棒,跳蛋,情趣按摩棒,充氣娃娃,保險套,飛機杯,潤滑液,情趣內衣,性感內衣,g點,持久液,按摩棒,跳蛋,情趣按摩棒,充氣娃娃,保險套,飛機杯,潤滑液,情趣內衣,性感內衣,g點,持久液,按摩棒,跳蛋,情趣按摩棒,充氣娃娃,保險套,飛機杯,潤滑液

linran said...

After read your blog, I think you are a wonderful person, for your blog is the best one I have ever seen. If you do not mind, I would like to know do you like fashion? Have you ever heard of polo shirts, which are very chic, especially the polo t shirts, I love them very much. I also like playing tennis rackets, it can keep healthy, what do you like to do? I consider it as my great pleasure to introduce myself as the outlet of polo t shirts women
polo t shirts on sale
and the warmly welcomed
polo t shirts for women
Now. I'd like to introduce our masterpieces, such as
polo shirts on sale
polo shirts men
men's polo shirt
men polo shirt
mens polo shirts
mens polo shirt
besides we also sell
cheap polo shirts
discount polo shirts
men's polo shirts
women's polo shirts
Which are popular with fashinable people. We are also the outlet of
cheap tennis racket
discount tennis racket
in this sporty season, we recommend
prince tennis racquet
head tennis rackets
wilson tennis racket
babolat tennis racquet
There more new products in our store online, we are expecting you to come. We can say that you must find your satisfied things in our store.

the said...

Top website designing company in India, Nashik provding world class website design and solutions.
Nashik Website Designing, Nasik Webpage Design, Nashik Website Design, Nashik website company, SEO Company Nashik, Nashik Website Development Services

ryan said...

Watch company replica IWC Schaffhausen celebrates the man known as Saint-Ex with a special edition.
watches replica
replica watches
replica watch
Fake watches
Men’s watcheshes
IWC
replica IWC
IWC replica
replica IWC watch
replica IWC watches
IWC Aquatimer
iwc big pilot
IWC Da Vinci
IWC Vintage collection
IWC Portofino
IWC Portuguese
replica IWC Aquatimer
replica IWC Da Vinci
replica IWC Portofino

红磊 said...

ルイ・ヴィトン(バッグ)
バッグ・ポーチ

財布・小物
リクエスト
腕時計・ウオッチ
アクセサリー

ファッション
パーツ・関連製品
贈り物
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
louis vuittonlouis vuitton
lv bagslv bags
lv handbagslv handbags
louis vuitton handbagslouis vuitton handbags
discount louis vuittondiscount louis vuitton
discount lv bagsdiscount lv bags
discount lv handbagsdiscount lv handbags
discount louis vuitton handbagsdiscount louis vuitton handbags

红磊 said...

cheap louis vuittoncheap louis vuitton
cheap lv bagscheap lv bags
cheap lv handbagscheap lv handbags

cheap louis vuitton handbagscheap louis vuitton handbags
louis vuitton salelouis vuitton sale
lv bags salelv bags sale
lv handbags salelv handbags sale
louis vuitton handbags salelouis vuitton handbags sale

chanel bagschanel bags

cheap chanel bagscheap chanel bags
discount chanel bagsdiscount chanel bags
chanel bags salechanel bags sale






ルイ・ヴィトン(バッグ)
シャネル
グッチ
エルメス
ボッテガ ヴェネタ
クロエ
腕時計・ウオッチ
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
louis vuittonlouis vuitton
lv bagslv bags
lv handbagslv handbags

红磊 said...

louis vuitton handbagslouis vuitton handbags
discount louis vuittondiscount louis vuitton

discount lv bagsdiscount lv bags
discount lv handbagsdiscount lv handbags
discount louis vuitton handbagsdiscount louis vuitton handbags

cheap louis vuittoncheap louis vuitton
cheap lv bagscheap lv bags
cheap lv handbagscheap lv handbags
cheap louis vuitton handbagscheap louis vuitton handbags
louis vuitton salelouis vuitton sale
lv bags salelv bags sale
lv handbags salelv handbags sale
louis vuitton handbags salelouis vuitton handbags sale
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
christian louboutin
christian louboutin boots
Christian Louboutin shoes
Louboutin shoes
我要吃美食网
老猫
老猫博客
老猫的博客
老猫外贸
老猫模板
老猫zencart模板
老猫模板演示Demo zencart

dfadf said...

Microsoft Office
Office 2010
Microsoft Office 2010
Office 2010 key
Office 2010 download
Office 2010 Professional
Microsoft outlook
Outlook 2010
Windows 7
Microsoft outlook 2010

power balance said...

Save on Sporting Goods at Amazon! power balance Free 2-Day Shipping.011 BORYOR Silicagel germanium power balance bracelet size

Frank said...

Along with the superior uggs classic cardy outlet chronograph, the design ensures complete comfort and durability for its wearer. The bracelet sets it apart from regular watches making it a star performer amongst all the ugg clearance luxurious watches of Rolex. Its precision and beauty have become stuff of legends like Jack Nicklaus’s golfing style. nice and cheap ugg boots “Life”, Edward Norton famously quotes “shouldn’t be avoided, it should be faced”. Who else can deliver a punch line like that but a man who is known for his humility and his perseverance in the eye of a storm?

rscredits said...

Buy diablo 3 gold, Get More Free Diablo 3 Gems at Diablohome!

10000K Gold + Free 10 Gems

15000K Gold + Free 15 Gems

18000K Gold + Free 20 Gems

20000K Gold + Free 25 Gems

25000K Gold + Free 30 Gems

You can buy diablo 3 gold,items ,powerleveling and account with Western Union to Get extra 3% off.

Diablohome.com offers cheap diablo 3 gold, Diablo 3 Items, Diablo 3 Power Level, Diablo 3 account, Diablo 3 CD Key and so on. Buy cheap Diablo 3 products by various of payments with 100% safe, 100% legal and 100% handwork.