2007/05/23
---------------------------------------------------------------------------------------------------------------------------
 Microsoft Office 2000 Controllo UA di Microsoft Office (OUACTRL.OCX v. 1.0.1.9) "HelpPopup" method Remote Buffer Overflow
 and winhlp32.exe Denial of Service (hey, don't you think this is a very long title :)

 author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org
 
 control is set as:
 RegKey Safe for Script: True
 RegKey Safe for Init: True
---------------------------------------------------------------------------------------------------------------------------







Registers content:

EAX 00000000
ECX 7E39EC0C USER32.7E39EC0C
EDX 7C91EB94 ntdll.KiFastSystemCallRet
EBX 38CFD2D0 OUACTRL.38CFD2D0
ESP 01D0F434 UNICODE "aaaa..."
EBP 00610061
ESI 02ACC86C
EDI 00000000

EIP 00610061