基于MS Office漏洞利用技术的研究  

Research On Techniques Of Exploiting Based On MS Office Vulnerablities

作　　者：王俊卿[1] 陈高峰[2] 连强[3] 

机构地区：[1]北京科技大学 [2]西北农林科技大学 [3]哈尔滨工程大学

出　　处：《微计算机信息》2012年第10期364-365,408,共3页Control & Automation

摘　　要：伴随着微软Office系列文档在桌面系统的广泛应用,其相关应用软件的安全问题也引起了国内外安全界和攻击者的普遍关注,从最初的宏病毒到现在的针对文档格式解析的漏洞利用,各种攻击层出不穷。为此微软现在也加快了针对Office软件的安全公告和补丁程序的发布,以修补不断增加的漏洞。本文主要从缓冲区溢出原理、office文档格式分析并通过一个简单的word漏洞利用的实例阐述了基于Office的漏洞分析与利用技术。As Microsoft Office documents are widely used in desktop systems, the security of these applications is widely concerned and considered by security keepers and also attackers home and abroad. Attacks range from primitive micro viruses to present vulner- ability exploiting against document form analysis. So Microsoft Corporation now makes a faster reaction in announcing Office security announcement and publishing patches against the increasing vulnerabilities. The article tell us techniques of exploiting based on office vulnerabilities from the buffer overflow and office document structure, and a simple word exploiting example is submitted.

关 键 词：关键字 缓冲区溢出 漏洞利用 文档格式 SHELLCODE 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]