full-disclosure - 2x 0day Microsoft Windows Excel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060108184040.GA7047@sivokote.iziade.m$>
Date: Sun Jan  8 18:40:55 2006
From: guninski at guninski.com (Georgi Guninski)
Subject: 2x 0day Microsoft Windows Excel

will there be a chance of bidding on something more reliable than ebay?

-- 
where do you want bill gates to go today?

On Sun, Jan 08, 2006 at 04:10:16PM +0100, ad@...poverflow.com wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>  
> after many hours working on excel I have found a
> critical excel bug exploitable. This is not a stack bof
> nor a heap bof , a bug extremely hard to find and trigger , but it
> conduct excel to execute any arbitrary codes while opening a malicious
> .xls file.
> 
> note: the bug isn't related to both excel dos that I have already
> published but shows similiar to a null pointer bug at a first look.
> much infos won't be disclosed publicly or privately and this will be
> transmitted to ms before the spyware loosers catch it :)
>