Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3329. PoCs published by Core Security.
AI-analyzed exploit summary This exploit demonstrates a memory corruption vulnerability in Microsoft Office's HtmlDlgHelper class, which can lead to remote code execution when a malicious .XLS or .DOC file is opened. The vulnerability is triggered by instantiating the 'HtmlDlgHelper Class Object' in an Office document, leading to uninitialized memory access in 'mshtmled.dll'.
Description
mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."
Exploits (1)
This exploit demonstrates a memory corruption vulnerability in Microsoft Office's HtmlDlgHelper class, which can lead to remote code execution when a malicious .XLS or .DOC file is opened. The vulnerability is triggered by instantiating the 'HtmlDlgHelper Class Object' in an Office document, leading to uninitialized memory access in 'mshtmled.dll'.