Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:26132
HistoryApr 14, 2011 - 12:00 a.m.

Vulnerabilities in Microsoft Reader and HIS

2011-04-1400:00:00
vulners.com
7

Microsoft Reader is a PC/tablet software for reading the ebooks in LIT
format and the Audible audio books.
The following are a couple of integer overflows, an heap and an array
indexing overflow and the writing of a NULL byte in an arbitrary memory
location:

http://aluigi.org/adv/msreader_1-adv.txt
http://aluigi.org/adv/msreader_2-adv.txt
http://aluigi.org/adv/msreader_3-adv.txt
http://aluigi.org/adv/msreader_4-adv.txt
http://aluigi.org/adv/msreader_5-adv.txt

There are also some bugs in Microsoft Host Integration Server 2010 but
they are only Denial of Service vulnerabilities like the crashing and
the freezing of the services with CPU at 100%:

http://aluigi.org/adv/snabase_1-adv.txt


Luigi Auriemma
http://aluigi.org