|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Microsoft Windows LoadImage API IntegerBuffer overflow
From: Berend-Jan Wever (skylined
edup.tudelft.nl)
Date: Sat Dec 25 2004 - 13:57:41 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Since the exploit published by flashsky is a rip off of my IE exploit
script published in the IFRAME exploit, it will probably be caught by some
IDS/AV signatures as being the IFRAME exploit.
Cheers,
SkyLined
>
> This vul can be exploited, at
> http://www.xfocus.net/flashsky/icoExp/index.html ,i give a test
> exp(open 28876 port) for windows xp sp1, but it need html sctipt run
> and allocate memory.
>
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]