MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow

This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP. By supplying a .xls file with a malformed OBJ (recType 0x5D) record an attacker can get the control of the excution flow. This results aribrary code execution under the context of the user.

Search Other Modules

Exploit Rank

• Normal

Exploit Authors

• Nicolas Joly < >
• Shahin Ramezany < shahin [at] abysssec.com >
• juan vazquez < >

Vulnerability References

• CVE-2010-0822
• OSVDB-65236
• BID-40520
• MSB-MS10-038
• http://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/

Exploit Targets

• 0 - Microsoft Office Excel 2002 10.2614.2625 Service Pack 0(Office XP) on Windows XP SP3
• 1 - Microsoft Office Excel 2002 10.6501.6626 Service Pack 3 (Office XP SP3) on Windows XP SP3 (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/fileformat/a-pdf_wav_to_mp3
• exploit/windows/fileformat/acdsee_fotoslate_string
• exploit/windows/fileformat/acdsee_xpm
• exploit/windows/fileformat/activepdf_webgrabber
• exploit/windows/fileformat/adobe_collectemailinfo
• exploit/windows/fileformat/adobe_cooltype_sing
• exploit/windows/fileformat/adobe_flashplayer_button
• exploit/windows/fileformat/adobe_flashplayer_newfunction
• exploit/windows/fileformat/adobe_flatedecode_predictor02
• exploit/windows/fileformat/adobe_geticon

Exploit Usage Information

Exploit Module Options