OuTian's 芭樂閣 » Word 0day Combo

Word 0day Combo

2006-12-18 17:13

繼前幾天爆過 Microsoft Word 的 0day 漏洞後
這一個星期下來，又接連爆了幾個
並且在 milw0rm 上也有了 PoC

我實際測試了幾個可以開 Word 檔案的軟體，結果是

Microsoft Word 2007 - Crash
OpenOffice Writer on Linux - Crash
OpenOffice Writer on Windows - Crash
Abiword on Linux - OK
Abiword on Windows - OK

當然開檔後會 Crash 不代表一定就會爆，但就是 “有可能” 了 ....
以下，有圖有真相 -

Microsoft Word 2007

OpenOffice Writer on Windows

OpenOffice Writer on Linux

Abiword on Windows

Abiword on Linux

Articles (12)
- good (8)
- Novel (0)
- Story (4)
Database (1)
- Mysql (1)
Gossip (28)
My Links (0)
MySelf (296)
- About me (43)
- Heart (42)
- OTClass (10)
- Personal Diary (208)
Networking (8)
- Cisco (7)
OS (14)
- FreeBSD (7)
- Linux (2)
- Solaris (1)
- Windows (4)
Programming (9)
- C (1)
- Java (0)
- Perl (5)
- PHP (1)
- Shell (1)
Relaxation (5)
- Game (5)
Security (52)
- Tools (3)
- Vulnerability (19)
Service (1)
- Apache (1)
Software (1)
- unix (0)
- Windows (1)