OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

jamikazugmail.com
Date: Sun Apr 01 2007 - 19:02:47 CDT


Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)

Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows XP SP2
(It also must to work on all nt based windows but not tested)

Update: It also bypass eeye security ani patch!

Author: jamikazu
Mail: jamikazugmail.com

Bug discovered by determina (http://www.determina.com)

Credit: milw0rm,metasploit, SkyLined, http://doctus.net/

invokes calc.exe if successful

Note: do not open link in new tab with ie7 ,start new iexplorer.exe and past it.
hxxp://jamikazu.110mb.com/ani_exploit/ani_exp.htm

Regards,
Jamikazu