Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC

From: Paul Laudanski (zx_at_castlecops.com)
Date: 09/29/05

  • Next message: Sergey V. Gordeychik: "RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein" 
    Date: Thu, 29 Sep 2005 17:41:13 -0400 (EDT)
To: warl0ck@linuxmail.org

    On 29 Sep 2005 warl0ck@linuxmail.org wrote:

    > It is issue with almost all the firewalls
    > firewalls don't protect the running applications
    > themselves.I think i don't get is what does it
    > have to do with DDE ?.Also one can read firewall
    > ACL from the settings and inject code into the
    > running trusted process.

    This "exploit" was tested by members at CastleCops and found to be untrue:

    http://castlecops.com/postlite134369-.html

    Snapshots also provided. 

    -- 
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops(SM), http://castlecops.com
  • Next message: Sergey V. Gordeychik: "RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein"

    Relevant Pages