|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Microsoft Media Player .ASX parser buffer overflow (win98, others?)
From: Pauli Ojanpera (pauli_ojanpera
HOTMAIL.COM)Date: Wed Nov 15 2000 - 03:05:05 CST
- Next message: Bluefish (P.Magnusson): "Re: dos commands via iis 4 (TFTP)"
- Previous message: Lincoln Yeoh: "Re: dos commands via iis 4 (TFTP)"
- Next in thread: Teicher, Mark: "Re: Microsoft Media Player .ASX parser buffer overflow (win98, others?)"
- Reply: Teicher, Mark: "Re: Microsoft Media Player .ASX parser buffer overflow (win98, others?)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
It bugs as hell.
A valid ASX file to be opened in Microsoft Media Player 6.4x:
<ASX version = "3.0">
<Entry>
<Ref href="anasf.asf">
</Entry>
</ASX>
Make any keyword longer than 21000 characters and you've got it.
Not too easy to exploit though.. prove your skills ;)
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
- Next message: Bluefish (P.Magnusson): "Re: dos commands via iis 4 (TFTP)"
- Previous message: Lincoln Yeoh: "Re: dos commands via iis 4 (TFTP)"
- Next in thread: Teicher, Mark: "Re: Microsoft Media Player .ASX parser buffer overflow (win98, others?)"
- Reply: Teicher, Mark: "Re: Microsoft Media Player .ASX parser buffer overflow (win98, others?)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]