OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Windows .ANI LoadAniIcon Stack Overflow

From: Kristian Hermansen (kristian.hermansengmail.com)
Date: Mon Apr 02 2007 - 12:54:09 CDT

Dave Aitel <daveimmunityinc.com> wrote:
> ASRL has limited entropy and the attacker can continue to try exploits
> an infinite number of times (as Solar Eclipse points out). This means
> you can write a reliable Vista exploit, theoretically. I'll probably
> finish one up on Monday.

On 32-bit, yes, but 64-bit ASLR entropy means it is not very likely to
hit your offset :-) Has anyone even attempted a 64-bit XP/Vista ANI
exploit?
--
Kristian Hermansen

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/