Post #3917269

@tiraniddo@infosec.exchange Yeah, I recall doing such things in the past with seeing how objects behave when loaded in a RTF file in word. And some were quite interesting. (Some crashes, some attempts to load a DLL or a .py file from the same directory as the RTF document.) This case is a service, so I don't think anything CWD-related will be interesting. And I can simply choose which object to load in the service based on its CLSID. With Word, I could just brute force it all with BFF directly. But this being service based makes things a bit separated from the fuzzing framework, so I suppose a bit more tooling would be involved if I want to brute force test things.