Re: Microsoft Word RTF parser buffer overflow

[3APA3A <3APA3A () SECURITY NNOV RU>]

Hello Pauli Ojanpera,

This  issue  was  posted  here by hypoclear () JUNGLE NET in beginning of
March. As he noted in his posting EIP isn't overwritten, so this issue
probably couldn't be exploited the way it was in Wordpad.

29.08.2000 17:49, you wrote: Microsoft Word RTF parser buffer overflow;


P> The RTF parser got a bug which can be triggered with
P> a .rtf file like this:
P> "{\rt" + 12000 'x''s + "}"


/3APA3A