Microsoft Excel - SxView Record Parsing Heap Memory Corruption

2010-09-29T00:00:00
ID EDB-ID:15148
Type exploitdb
Reporter Abysssec
Modified 2010-09-29T00:00:00

Description

MOAUB #29 - Microsoft Excel SxView Record Parsing Heap Memory Corruption. CVE-2010-1245. Dos exploit for windows platform

                                        
                                            '''
  __  __  ____         _    _ ____
 |  \/  |/ __ \   /\  | |  | |  _ \
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ <  (day 29 binary analysis)
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/
  
'''
  
  Title               :  Microsoft Excel SxView  Record Parsing Heap Memory Corruption
  Version             :  Excel 2002 SP3
  Analysis            :  http://www.abysssec.com
  Vendor              :  http://www.microsoft.com
  Impact              :  High
  Contact             :  shahin [at] abysssec.com , info  [at] abysssec.com
  Twitter             :  @abysssec
  CVE                 :  CVE-2010-1245
  
here is BA : http://www.exploit-db.com/moaub-29-microsoft-excel-sxview-record-parsing-memory-corruption/
here is the PoC : https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/15148.rar (moaub-29-exploit.rar)