Vulnerability Development mailing list archives

Possible Overflow in MS Word 2003


From: gmdalpian () gmail com
Date: 27 Apr 2006 13:44:37 -0000

  Hi!

  I've found a bug in Word 2003, that could possibly lead to a buffer overflow.
  To reproduce the bug, you have simply to create a document with a word of 32 or 33 characters (letters or numbers), 
followed by "." and some other character. Ex.:

01234567890123456789012345678901. Test

  The text above should crash MS Word 2003, with Buffer Overrun error.
  This bug was tested in Microsoft Office Word 2003 (11.6568.6568) SP2, brazilian portuguese.
  Regards,

  Guilherme M. Dalpian


Current thread: