Re: Microsoft Windows LoadImage API IntegerBuffer overflow

From: Berend-Jan Wever (skylined_at_edup.tudelft.nl)
Date: 12/25/04

  • Next message: GulfTech Security: "php-Calendar File Include Vulnerability [ Command Exec ]" 
    Date: Sat, 25 Dec 2004 20:57:41 +0100 (CET)
To: "bugtraq@securityfocus.com" <bugtraq@securityfocus.com>, "full-disclosure@lists.netsys.com" <full-disclosure@lists.netsys.com>

    Since the exploit published by flashsky is a rip off of my IE exploit
    script published in the IFRAME exploit, it will probably be caught by some
    IDS/AV signatures as being the IFRAME exploit.

    Cheers,

    SkyLined

    >
    > This vul can be exploited, at
    > http://www.xfocus.net/flashsky/icoExp/index.html ,i give a test
    > exp(open 28876 port) for windows xp sp1, but it need html sctipt run
    > and allocate memory.
    >
    >
    >
    >
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >

  • Next message: GulfTech Security: "php-Calendar File Include Vulnerability [ Command Exec ]"

    Relevant Pages