CVE-2017-0261 PoC — Microsoft Office 安全漏洞

Source

https://github.com/kcufId/eps-CVE-2017-0261

Associated Vulnerability

Title:Microsoft Office 安全漏洞 (CVE-2017-0261)
Description:Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.

Description

eps漏洞(CVE-2017-0261)漏洞分析

Readme

# eps-CVE-2017-0261-
eps漏洞(CVE-2017-0261)漏洞分析

分析过程idb(ida6.1)

中间文档

加载eps程序

使用的poc代码

以及漏洞的原始文件。

File Snapshot


 [4.0K]  /data/pocs/178894af1b454061e1405f9d8379d1f5878ede8e
├── [4.0K]  done
│   ├── [ 772]  eps.conf
│   ├── [435K]  EPSIMP32.FLT
│   ├── [3.5K]  LoadEps.exe!!
│   └── [ 56K]  poc.eps
├── [6.3M]  EPSIMP32.idb
├── [1.7K]  eps分析.txt
├── [4.0K]  LoadEps
│   ├── [3.5K]  LoadEps.asm
│   ├── [ 863]  Macro.inc
│   └── [ 211]  Makefile
├── [ 166]  README.md
└── [4.0K]  sample
    └── [245K]  2ABE3CC4BFF46455A945D56C27E9FB45

3 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!