bugtraq - WorldFlash - Spyware and BO

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 28 Aug 2003 17:36:15 +0200
From: mac.ac@...nline.de (Dr. Markus a Campo)
To: bugtraq@...urityfocus.com
Cc: ken@...ldflash.com
Subject: WorldFlash - Spyware and BO

I use the demo-version of the WorldFlash News-Ticker Gold M5.30i
(http://www.worldflash.com/). While investigating some unexpected crashs
of the programm with a sniffer, I noticed that some privat informations
are sent back to WorldFlash, i.e. my real IP behind the firewall, the
mailserver I use, and other stuff (see attachment).

When I contacted the vendor I was told to uninstall the program - YES
SIR, I WILL DO SO

The crash seems to be a buffer overrun while getting news. Some sites
send back a whole bunch of useless HTML-crap back to the ticker.

Best regards

Markus a Campo

View attachment "wordflash.txt" of type "text/plain" (1237 bytes)