The author, working at eEye in 2006, found what seemed like a big zero-day in Office 2007, but it only worked with a debugger attached.
Not wanting to admit it wasn't a real exploit, the eEye team pulled all-nighters for several days and found a real bug in Microsoft Publisher where SafeInt wasn't enabled for a specific structure.
They found a valid exploit (CVE-2007-1754) which got patched in MS07-037. And he regrets causing Microsoft's David LeBlanc to cut his vacation short.
I couldn’t even be bothered to read past when he started yapping about the bartender giving him more drinks. I’d rather read the coherent version after the hangover is gone.
