Re: [Full-disclosure] Someone wasted a nice bug on spyware...

On Wednesday 28 December 2005 19:16, Nick FitzGerald wrote:
> The fact it was used for installing spyware (and may have been so for
> near on two weeks now) simply shows you where the money is these days.

Its a sad state of affairs when $19.95 crapware scams make more money than
cleaning out a few bank/egold/epoker accounts.

Since WMF/EMF is basically raw access to the GDI API, expect to see quite
a few of these bugs. For the curious:

- http://msdn.microsoft.com/library/en-us/gdi/metafile_250z.asp

For anyone using the Metasploit module (aka crappy wrapper around the
original file), keep in mind that for the exploit to work, you need to
request a path from the attacking system path ending in .wmf (or .tiff,
or .emf, or ...). The exploit has been tested against non-english
versions of Windows as well (Polish, Spanish, a few others) and works
just fine as long as DEP is turned off.

-HD
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: Hey Stan - Tammy Faye Bakker
    ... brother took over her financial affairs. ... Robertson his donation?" ... My aunt thinks her middle child makes bad financial ... There was a death of some relative, and money went to my ...
    (rec.food.cooking)
  • Re: Not allowed to carry money around
    ... > your bank statement. ... The nice policeman will then give you back your money ... a totally unacceptable state of affairs. ...
    (uk.legal)
  • Re: Public Domain Software (PDS)
    ... I'm in totally agreement with you there...not a topic I'd ... >it's actually a sad state of affairs that such a simple and obvious thing ... is that very few paople know what money is. ... and souls are a delusion. ...
    (alt.lang.asm)
  • Re: Lucious Malfoys occupation was ?
    ... but sticking his nose into affairs which can gain him power. ... OLD money to buy into something that could make him more ...
    (alt.fan.harry-potter)
  • Re: Grow up
    ... if you can make girls laugh and have ... the personality you'll get a date. ... & spend the money & have affairs ...
    (uk.games.video.xbox)