Materialized exploit

CVE-2007-1911

1 public exploit(s) for this CVE, 1 materialized with their code.

For defensive research only. Only test on systems you own or have written authorization for. Unauthorized access is illegal.

ExploitDB dos windows Verified

Source

Microsoft Word 2007 - Multiple Vulnerabilities

By muts

How to test this exploit

Denial of service: sends malformed input to crash the service. Test in an isolated VM, the effect is destructive.

Code txt

# Mati Aharoni

# muts [.@.] offensive-security.com

# http://www.offensive-security.com





My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming.

No deep analysis was done, I leave that to the community.

These are some of the results:



file789-1.doc  - Unspecified Overflow in word 2007 - Crash in wwlib.dll . Code execution is not trivial.

file798-1.doc . Word 2007 CPU exhaustion DOS - CPU shoots up to 100 %.

file613-1.doc -  Word 2007 CPU exhaustion DOS + ding - CPU shoots up to 100 %, and windows goes .ding!.



These files can be found at http://www.offensive-security.com/0day/0day.tar.gz

backup: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3690.tar.gz (04092007-0day.tar.gz)


Be safe,



Muts


# milw0rm.com [2007-04-09]