This component allows you to visualize, create and modify xls files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.
Online demonstration
Text version
This is the content of registers when the crash happens:
EAX 003042D4
ECX 01642A34
EDX 00000000
EBX 0173EA58
ESP 0173EA2C
EBP 0173EC64
ESI 00200169
EDI 03C20024 UNICODE "AAA..."
EIP 77527420 ole32.77527420
77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH
2007/05/01
MoAxB #01: PowerPointViewer.ocx 3.1 multiple methods DoS
well, let's start the MoAxB with a DoS. This component allows you to visualize, create and modify ppt files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.
Online demonstration
Text format
This is the content of registers when the crash happens:
EAX 000EC484
ECX 01642A38
EDX 00000000
EBX 0173EA5C
ESP 0173EA30
EBP 0173EC68
ESI 000F4241
EDI 039E0024 UNICODE "AAA..."
EIP 77527420 ole32.77527420
77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.
Online demonstration
Text format
This is the content of registers when the crash happens:
EAX 000EC484
ECX 01642A38
EDX 00000000
EBX 0173EA5C
ESP 0173EA30
EBP 0173EC68
ESI 000F4241
EDI 039E0024 UNICODE "AAA..."
EIP 77527420 ole32.77527420
77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH
2007/04/19
Month of ActiveX Bug announced
well, first of all sorry for my poor english then some informations about activex controls from wikipedia.
so I'm here and I'm proud to announce that on 2007 MAY will start the Month of ActiveX Bug (MoAxB).
most of them are simple DoS (don't worry there are also some code execution) but that's because MoAxB has only a sense: to inform developers about the risk of using activex controls.
naturally everyone's invited to post activex bug or to ask for information or simply to post comments.
Greetz to:
my wife and my daughter for all the love they give to me and for their patience
in alphabetical order :)
auron, GiampaZ, hawake, ppanico2, redeemer, rgod, str0ke, The Wanderer, wicker25 and to all I forgot to mention for their support and friendship.
now be safe brothers, see you on 2007/05/01
so I'm here and I'm proud to announce that on 2007 MAY will start the Month of ActiveX Bug (MoAxB).
most of them are simple DoS (don't worry there are also some code execution) but that's because MoAxB has only a sense: to inform developers about the risk of using activex controls.
naturally everyone's invited to post activex bug or to ask for information or simply to post comments.
Greetz to:
my wife and my daughter for all the love they give to me and for their patience
in alphabetical order :)
auron, GiampaZ, hawake, ppanico2, redeemer, rgod, str0ke, The Wanderer, wicker25 and to all I forgot to mention for their support and friendship.
now be safe brothers, see you on 2007/05/01
Subscribe to:
Posts (Atom)