full-disclosure - Re: Microsoft Office Excel 2010 memory corruption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <SNT002-W16D588EDAFDCE16ED1346CC3630@phx.gbl>
Date: Sun, 28 Oct 2012 20:31:19 -0700
From: Yuhong Bao <yuhongbao_386@...mail.com>
To: kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>,
	"full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Microsoft Office Excel 2010 memory corruption

Of course, if you can control the crash address so it is >=0x1000, then it could be exploitable, but until then it is not.

> Date: Mon, 29 Oct 2012 06:53:52 +0330
> Subject: Re: [Full-disclosure] Microsoft Office Excel 2010 memory corruption
> From: kavehghaemmaghami@...glemail.com
> To: yuhongbao_386@...mail.com
> 
> Yuhong  thank you so much fore sharing
> 
> is OK if i ask some question ? if its ok  you can answer me
> 
> what is the fast way to find out crash cause like use-after-free
> double free and heap corruption ?
> i mean to figure out if there is heap corruption like use-after free
> double free etc ....
> 
> this crash analayzer scares me
> 
> look at the crash was null pointer and how the hell other guy analyze
> it and found out its exploitable
> 
> http://securityevaluators.com/files/papers/CrashAnalysis.pdf
> 
> Best Regards
> 
> On Mon, Oct 29, 2012 at 6:30 AM, Yuhong Bao <yuhongbao_386@...mail.com> wrote:
> >> How can i make sure a crash is not exploitable?
> > Look at the crash address (null dereference will be < 0x1000) and type of
> > exception.
> > Also type G in WinDbg to see if it is handled.
 		 	   		  
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/