what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from TieLei Wang

OpenOffice.org vclmi.dll Integer Overflow

Posted May 16, 2012

Authored by TieLei Wang

A vulnerability is caused due to an integer overflow error in the vclmi.dll module when allocating memory for an embedded image object. This can be exploited to cause a heap-based buffer overflow via, for example using a specially crafted JPEG object within a DOC file. OpenOffice.org 3.3.0 and 3.4 beta users are advised to upgrade to Apache OpenOffice 3.4. Users who are unable to upgrade immediately should be cautious when opening untrusted documents.

tags | advisory, overflow

advisories | CVE-2012-1149

SHA-256 | 9b9385109737f1c4e076d9b046209fed8fd0d8cc5001274e0f5a3f2bbb355d40

Download | Favorite | View

Heap Taichi: Exploiting Memory Allocation Granularity In Heap-Spraying Attacks

Posted Dec 17, 2010

Authored by Wei Zou, TieLei Wang, Tao Wei, Zhenkai Liang, Yu Ding

Whitepaper called Heap Taichi: Exploiting Memory Allocation Granularity in Heap-Spraying Attacks.

tags | paper

SHA-256 | 5d81db54a8c1cb8adde0d3a9a3232376c7e10413b9da9189fa92a35fc83d1d8c

Download | Favorite | View