Microsoft Excel – HFPicture Record Parsing Remote Code Execution

• Exploit Database
• 105 阅读

• 作者： Abysssec
  日期： 2010-09-16
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/15019/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22

  &apos;&apos;&apos; ________ __ ____ |\/|/ __ \ /\| || |_ \ | \/ | || | /\ | || | |_) | | |\/| | || |/ /\ \| || |_ <(day 16 binary anlysis) | || | |__| / ____ \ |__| | |_) | |_||_|\____/_/\_\____/|____/   &apos;&apos;&apos;   Title :Microsoft Excel HFPicture Record Parsing Remote Code Execution Vulnerability Version :Excel 2002 SP3 Analysis:http://www.abysssec.com Vendor:http://www.microsoft.com Impact:High Contact :shahin [at] abysssec.com , info[at] abysssec.com Twitter :@abysssec CVE :CVE-2010-1248   here is BA : http://www.exploit-db.com/maoub-16-microsoft-excel-hfpicture-record-parsing-remote-code-execution-vulnerability/ here is the PoC : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15019.rar (HFPicture_PoC.rar)