full-disclosure - Re: New GDI exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: joshuaperrymon at gmail.com (Josh L. Perrymon)
Subject: Re: New GDI exploit

http://www.c-enter.hu/center/0230779.html

I do have some good news..   Seems some AV companies already have some
sigs to spot the .jpg vuln.

Symantec picks it up as bloodhound so email propagation may become less viable.

It does this with the local and remote shellcodes.

JP