full-disclosure - 3 new MS patches next week... but none fix 0x01!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

From: tlarholm at pivx.com (tlarholm@...x.com)
Subject: 3 new MS patches next week... but none fix 0x01!

> From: Liu Die Yu [mailto:liudieyuinchina@....sina.com.cn] 
> 
> 0x01 URL spoofing works on up-to-date en Win2k3 with 
> evaluation product key.

0x01 URL spoofing works on all currently available Windows versions. It
has not been patched yet and nobody has claimed so.

> so, i doubt whether your XP SP2 is an internval version of microsoft.
:-)

The beta version of XP SP2 is available for download by MSDN
subscribers.

Regards

Thor Larholm
Senior Security Researcher
PivX Solutions
24 Corporate Plaza #180
Newport Beach, CA 92660
http://www.pivx.com
thor@...x.com
949-231-8496

PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
Qwik-Fix
<http://www.qwik-fix.net>