Title : Microsoft Office OneNote 2010 WriteAV Vulnerability
Version : Microsoft Office professional Plus 2010
Date : 2012-11-19
Vendor : http://office.microsoft.com
Impact : Med/High
Contact : coolkaveh [at] rocketmail.com
Twitter : @coolkaveh
tested : XP SP3 ENG
###############################################################################
Bug :
----
memory corruption during the handling of the one files
How can i make sure a crash is not exploitable? (( The short answer is
simple assume every crash is exploitable and just fix it.))
Or
"defective software is OK."
----
################################################################################
(b70.998): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000000 ebx=05eb3701 ecx=062baa08 edx=00005b3f esi=062baa08 edi=00000000
eip=3acdee22 esp=00125dbc ebp=00125dc4 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00210246
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Microsoft Office\Office14\ONMain.DLL -
ONMain!MsoCF::Frame::Finish+0x14bd2:
3acdee22 c7050000000001000000 mov dword ptr ds:[0],1 ds:0023:00000000=????????
---------------------------------------------------------------------------------
