MS Access 2010 - WriteAV Crash

WriteAV crash found during fuzzin at 14.01.2016. Details below.

Outlook 2010 - ReadAV Crash

Found during fuzinng @10.07.2016. Details below:

MS Publisher 2010 another crash

Another crash in Publisher 2010. Details below.

Irfan View - Crash - WMA heap crash

WMA crash found 09.04.2016 during IrfaView fuzzing... Details below:

Irfan View - Crash - TIFF case

TIFF crash found 09.04.2016 during IrfaView fuzzing... Details below:

Irfan View - Crash - ANI poc

ANI crash found 09.04.2016 during IrfaView fuzzing...

Irfan View - Heap Crash (TIF)

Crash during TIF preview... Details and poc below.

Irfan View - Crash @MSCTF!TF_CheckThreadInputIdle

I found a crash in IrfanView. The most interesting for me this time was unpacking original i_view32.exe to new exec (1,5MB). Details of the crash you will find below.

Outlook 2010 - WriteAV Crash

Few details (+poc) below...

NULL Pointer Dereference in MS Publisher 2010

MS Publisher 2010 - NULL_CLASS_PTR_DEREFERENCE

-----------------------------------------------------------------------
 Found : 04.06.2016
-----------------------------------------------------------------------
Open your Windbg and run MSPUB.exe. Attach debuger to Publisher.
Ctrl+S to check the symbols, and here we go:
dbg> srv*c:\symbols*http://msdn.microsoft.com/download/symbols