[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Microsoft Windows Assembly Execution Vulnerability MS12-005
# Published : 2012-01-14
# Author :
# Previous Title : AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow
# Next Title : MPlayer SAMI Subtitle File Buffer Overflow


# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability
# Date: 1/14/2012
# Author: Byoungyoung Lee, http://exploitshop.wordpress.com
# Version: Windows 7 32bit, fully patched until Jan 2012
# Tested on: Windows 7 32bit
# CVE : CVE-2012-0013

PoC: http://www.exploit-db.com/sploits/18372.docm

Open the document file, then allow the macro execution. This will
execute python script (python interpreters are required).
DEMO : http://www.youtube.com/watch?v=Odi6HiqzmL8&feature=youtu.be&hd=1