-
Garage Newcomer
LibreOffice 3.6.0.4 ODB format DOS 0-day
There is a invalid pointer deference vulnerability in LibreOffice in shlxthdjl.dll shell extension dll. The vulnerability is triggered by mouse over event on the OBD file .
This dll calls a function in msvcr90.dll with invalid pointer and crashes.
Problem Event Name: BEX64
Application Name: explorer.exe
Application Version: 6.1.7601.17567
Application Timestamp: 4d672ee4
Fault Module Name: MSVCR90.dll
Fault Module Version: 9.0.30729.6161
Fault Module Timestamp: 4dace4e7
Exception Offset: 00000000000552d4
Exception Code: c0000417
Exception Data: 0000000000000000
POC :create an empty file ODB file and mouse over it!
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules