CVE-2017-11882 PoC — Microsoft Office 安全漏洞

Source

https://github.com/ekgg/Overflow-Demo-CVE-2017-11882

Associated Vulnerability

Title:Microsoft Office 安全漏洞 (CVE-2017-11882)
Description:Microsoft Office 2007 SP3等都是美国微软（Microsoft）公司开发的办公软件套件产品。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确的处理内存中的对象。远程攻击者可借助特制的文件利用该漏洞在当前用户的上下文中执行任意代码。以下版本受到影响：Microsoft Office 2007 SP3，Microsoft Office 2010 SP2，Microsoft Office 2013 SP1，Microsoft Office 2016。

Description

Simple Overflow demo, like CVE-2017-11882 exp

Readme

# Overflow-Demo-CVE-2017-11882
Simple Overflow demo by strcpy text string, like CVE-2017-11882 exp

![screenshot](QQ-M20200108224340.png)

# Build
Build with Visual Studio 2017( 2019 is working too,  2015 is not working).

# Project Config
~~~
Project setting:
    c/c++ 
        Optimization
            Optimization: Maximum Optimization (Favor Size) (/O1)
            Favor Size of Speed: Favor small code (/Os)
            Whole Program Optimization: no
            
        Code Generation
        	Basic Runtime Checks: Default
            Security Check:  Disable Security Check (/GS-)
            
    Linker
        Advanced
            Randomized Base Address: No (/DYNAMICBASE:NO)
            Data Execution Prevention(DEP): No (/NXCOMPAT:NO)
~~~

File Snapshot


 [4.0K]  /data/pocs/9b753fc1a3a62215d1bf996a1d1cda6fa7e26a0c
├── [4.0K]  OF-DEMO
│   ├── [2.2K]  OF-DEMO.cpp
│   ├── [8.5K]  OF-DEMO.vcxproj
│   ├── [1.1K]  OF-DEMO.vcxproj.filters
│   ├── [ 209]  pch.cpp
│   └── [ 616]  pch.h
├── [2.7K]  OF-Demo-Project.sln
├── [4.0K]  OF-GUI
│   ├── [3.6K]  Form1.cs
│   ├── [6.0K]  Form1.Designer.cs
│   ├── [5.8K]  Form1.resx
│   ├── [3.3K]  OF-GUI.csproj
│   ├── [ 466]  Program.cs
│   └── [4.0K]  Properties
│       ├── [1.2K]  AssemblyInfo.cs
│       ├── [2.7K]  Resources.Designer.cs
│       ├── [5.4K]  Resources.resx
│       ├── [1.0K]  Settings.Designer.cs
│       └── [ 242]  Settings.settings
├── [ 59K]  QQ-M20200108224340.png
├── [ 758]  README.md
├── [4.0K]  Release
│   ├── [ 10K]  OF-DEMO.exe
│   ├── [548K]  OF-DEMO.pdb
│   ├── [ 11K]  OF-GUI.exe
│   ├── [ 28K]  OF-GUI.pdb
│   └── [  48]  ov-demo.txt
└── [578K]  使用VC2017 + IDA模拟复现CVE-2017-11882缓冲区溢出.pdf

4 directories, 24 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!