OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Bug in Microsoft Word

From: Pedro Jota Calvorota (calvorotaya.com)
Date: Mon Oct 06 2003 - 20:49:03 CDT

I would like to make you notice two things:

- I downloaded the doc file from
http://www12.brinkster.com/bsecurity/Doc1.doc and checked it with MS
Ofcicce XP version and it crashes. Oddly if i do it with word97, it
doesn't not crash but shows the cursor at the end of the first line :|

- I just can't find the pattern

00 00 00 00 00 a3 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 01
00 00 00 00 00 00 b4 01 00 00 20 00 00 00 9c 01 00 00 00 00 00 00 9c
01 00 00 00 00 00 00 9c 01 00 00 00 00 00 00 9c 01 00 00 00 00 00 00

in any doc i create, word97, or XP... is it the same in any varsion? i
don't even find de "b4 01" pattern to be able to modify the EAX register.

Can you explain it a little deeper?

Thanks a lot.

--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/