Understanding Microsoft Word OLE Exploit Primitives

This whitepaper (ToorCon San Diego, Oct 2015) by Dominic Wang documents OLE internals and exploitation tactics used against Microsoft Office, with a focus on the CTaskSymbol Use-After-Free vulnerability (CVE-2015-1642). It situates the vulnerability within prior OLE exploitation research (including CVE-2013-3906), notes recent malware campaigns that abused OLE flaws, and provides technical detail intended to explain and reproduce exploitation methods for analysis and research.