full-disclosure - Re: Microsoft Windows LoadImage API IntegerBuffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: skylined at edup.tudelft.nl (Berend-Jan Wever)
Subject: Re: Microsoft Windows LoadImage API IntegerBuffer
	overflow

Since the exploit published by flashsky is a rip off of my IE exploit
script published in the IFRAME exploit, it will probably be caught by some
IDS/AV signatures as being the IFRAME exploit.

Cheers,

SkyLined


>
>     This vul can be exploited, at
> http://www.xfocus.net/flashsky/icoExp/index.html ,i give a test
> exp(open 28876 port) for windows xp sp1, but it need html sctipt run
> and allocate memory.
>
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>