Looking for some insight into an issue with a MS Word 2003 addin using class
serialization to store data.
When using firewall software with a ‘Buffer Overflow Exploit Prevention’
feature, Proventia Desktop the calls to XML serialize o deserialize are
blocked. The application gives an error Buffer Overrun blocked on
NtCreateFile.
I’ve check it out using Application Verifier to test for unhandled
exceptions. When calling XML serialize or deserialize the application will
throw buffer overflow exceptions.
This appears to be an issue only with Word 2003 addins. A standalone .net
app callint Xml Serialize does not exhibit the same behavior.
Thanks in advance,
Al
serialization to store data.
When using firewall software with a ‘Buffer Overflow Exploit Prevention’
feature, Proventia Desktop the calls to XML serialize o deserialize are
blocked. The application gives an error Buffer Overrun blocked on
NtCreateFile.
I’ve check it out using Application Verifier to test for unhandled
exceptions. When calling XML serialize or deserialize the application will
throw buffer overflow exceptions.
This appears to be an issue only with Word 2003 addins. A standalone .net
app callint Xml Serialize does not exhibit the same behavior.
Thanks in advance,
Al