Airpwn & libpng holes
From: Matt Venzke (mvenzke_at_gmail.com)
Date: 08/07/04
- Previous message: Anthony Debhian: "[PHP Bug] How to hide a HTTP request in the apache logs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 6 Aug 2004 18:17:00 -0700 To: bugtraq@securityfocus.com
Has anyone seen any exploit images based on the libpng hole capable of
more than just crashing the system yet?
I was trying to figure if airpwn
(https://sourceforge.net/projects/airpwn/) could be used to do much
more than simply annoy people, and it occured to me that if anyone has
managed to craft truely malicious PNGs, they could easily use airpwn
to distribute them en masse, with the user-agent helping them figure
out which image to send, even if that wouldn't always be reliable...
Not that this is unique--I suppose you could also distribute malicious
bitmaps to anyone still using older versions of IE, or to distribute
any other sort of similarly malicious content.
All the more reason to convince people to secure their wireless
networks and update their software, I guess.
- Matt
- Previous message: Anthony Debhian: "[PHP Bug] How to hide a HTTP request in the apache logs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
