Microsoft Office Equation Editor stack buffer overflow

ronjor · Nov 15, 2017

Original Release date: 15 Nov 2017 | Last revised: 15 Nov 2017

Overview
Microsoft Equation Editor contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.

Solution
Apply an update
This issue is addressed in CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability.
Click to expand...

itman · Nov 15, 2017

Yes Microsoft, you need to update your old vulnerable code in your apps including the OS instead of "spewing" never ending BS about how secure your new OS's are:

Embedi discovered that Microsoft was still using a version of the EQNEDT32.EXE file that was compiled on November 9, 2000, meaning it was running on very old code that featured out-of-date libraries and did not use any of the recent security features added to Windows OS releases.
Click to expand...

Log in or Sign up

Microsoft Office Equation Editor stack buffer overflow

ronjor Global Moderator

itman Registered Member

Log in or Sign up

Microsoft Office Equation Editor stack buffer overflow

ronjor Global Moderator

itman Registered Member

Useful Searches