Re: ICQ Buffer Overflow Exploit

Subject: Re: ICQ Buffer Overflow Exploit
From: Simon Steed (totoXPLOITER.COM)
Date: Thu Jan 13 2000 - 14:37:53 CST

• Next message: Lark Lizerman: "Re: WebSitePro/2.3.18 + 2.4.9 is revealing Webdirectories"
• Previous message: Craig Ruefenacht: "Misleading sense of security in Netscape"
• In reply to: drew copley: "ICQ Buffer Overflow Exploit"
• Next in thread: Thomas Maschutznig: "Re: ICQ Buffer Overflow Exploit"
• Reply: Simon Steed: "Re: ICQ Buffer Overflow Exploit"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Tested on NT4 (SP6), ICQ ver 99 beta build 3.19

Does not work. Just get the URL 404 not found (obviously :o)). ICQ
Functions as normal.

Regards

Simon

At 06:30 PM 1/11/00 , you wrote:
>Buffer Overflow in ICQ
>
>
>OS tested on: Windows 2000
>ICQ version: 99b 1.1.1.1
>
>ICQ is a very popular chat client that is affected by
>a exploitable buffer
>overflow when it parses an URL sent by another user.

Project Xploiter - Open Source Development
http://www.xploiter.com/project_xploiter/index.html
Xploit your software before it Xploits you!
ICQ UIN: 22731442

• Next message: Lark Lizerman: "Re: WebSitePro/2.3.18 + 2.4.9 is revealing Webdirectories"
• Previous message: Craig Ruefenacht: "Misleading sense of security in Netscape"
• In reply to: drew copley: "ICQ Buffer Overflow Exploit"
• Next in thread: Thomas Maschutznig: "Re: ICQ Buffer Overflow Exploit"
• Reply: Simon Steed: "Re: ICQ Buffer Overflow Exploit"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Fri Jan 14 2000 - 20:44:26 CST