Second time,copy the same string, placed after the first string. var_234 is the length of the string. Total copy 0x2e0
bytes.
After copy,return address and SEH record has been overwritten.
0:000> k
ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be wrong.
0012c070 90909090 wpsio!TxExport+0xb3e1
0012c148 45e2a113 0x90909090
0:000> !exchain
0012c064: 90909090
Invalid exception stack at 90909090
The source data of memcpy is from the file poc.wps,offset 0x41d7.
建议：
--------------------------------------------------------------------------------
厂商补丁：
Kingsoft Corp
-------------
目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：