bugtraq - Microsoft WordPerfect Document Converter Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 5 Sep 2003 23:49:30 +0200
From: "Valgasu" <valgasu@...ack.org>
To: <bugtraq@...urityfocus.com>
Subject: Microsoft WordPerfect Document Converter Exploit

You can find a simple exploit for the Eeye vulnerability on
Microsoft WordPerfect Document Converter Buffer Overflow :
http://valgasu.rstack.org/word.zip

Modify the source and add new targets OS. This exploit works
on several french Windows NT/2K with Word 2000 9.0.2812
but it's trivial to modify exploit for Word 2000 SR1 for example
(offset in file of eip isn't the same). Read source code and test 
your own system.

Valgasu