Vulnerabilities in Microsoft Reader and HIS

[Luigi Auriemma <aluigi@xxxxxxxxxxxxx>]

Microsoft Reader is a PC/tablet software for reading the ebooks in LIT
format and the Audible audio books.
The following are a couple of integer overflows, an heap and an array
indexing overflow and the writing of a NULL byte in an arbitrary memory
location:

  http://aluigi.org/adv/msreader_1-adv.txt
  http://aluigi.org/adv/msreader_2-adv.txt
  http://aluigi.org/adv/msreader_3-adv.txt
  http://aluigi.org/adv/msreader_4-adv.txt
  http://aluigi.org/adv/msreader_5-adv.txt

There are also some bugs in Microsoft Host Integration Server 2010 but
they are only Denial of Service vulnerabilities like the crashing and
the freezing of the services with CPU at 100%:

  http://aluigi.org/adv/snabase_1-adv.txt


--- 
Luigi Auriemma
http://aluigi.org