Re: [Full-Disclosure] RE: Internet Explorer - Multiple Vulnerabilities

From: Berend-Jan Wever (SkyLined_at_edup.tudelft.nl)
Date: 01/21/04

Next message: Jason Coombs: "Re: What is the point here?"

Previous message: Cisco Systems Product Security Incident Response Team: "Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <bugtraq@securityfocus.com>
Date: Wed, 21 Jan 2004 14:47:57 +0100

I looked into the "buffer overflow": it's actually a stack overflow. This
means Outlook Express just runs out of stack space and terminates. Nothing
is overwritten, this is not exploitable to gain unauthorized access or
elevate priviledges.

Cheers,
SkyLined

> These are not IE vulnerabilities.
>
> In all, you have described several ways to do some basic ressource
> exhaustion by using Internet Explorer as well as an abnomaly in the Apache
> server and a possible exploitable buffer overflow in Outlook Express. The
> latter is definitely interesting, provided it is exploitable at all, but
the
> first items are not security vulnerabilities - details below.

Next message: Jason Coombs: "Re: What is the point here?"

Previous message: Cisco Systems Product Security Incident Response Team: "Cisco Security Advisory: Voice Product Vulnerabilities on IBM Servers"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
... Microsoft Outlook Express NNTP Response Parsing Buffer Overflow ... The vulnerability specifically exists when parsing Network News Transfer ...
(Bugtraq)
[Full-disclosure] iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsi
... Microsoft Outlook Express NNTP Response Parsing Buffer Overflow ... The vulnerability specifically exists when parsing Network News Transfer ...
(Full-Disclosure)
Re: [Full-Disclosure] RE: Internet Explorer - Multiple Vulnerabilities
... I looked into the "buffer overflow": it's actually a stack overflow. ... means Outlook Express just runs out of stack space and terminates. ... > server and a possible exploitable buffer overflow in Outlook Express. ...
(Full-Disclosure)
Re: Possible Buffer OverFlow in OutLook Express 5
... Possible Buffer OverFlow in OutLook Express 5 ... Well from your description and the crash info it doesn't look like a ... buffer overflow of any sort, but I'll look into it just the same, since ... I've never had the horror of looking at Outlook up closely (I mostly stick ...
(Vuln-Dev)
[NEWS] Buffer Overflow Found in Outlook Express for Macintosh
... Outlook express for Macintosh is a mail client developed by Microsoft. ... try to parse it, if the email contains a long line, a buffer overflow will ... e-mail (there is no need to open the affected e-mail for this attack to ... Vulnerable systems: ...
(Securiteam)