full-disclosure - Buffer Overflow vulnerability in Windows Display Manager [Suspected]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Jan  3 09:54:01 2006
From: sumit.siddharth at gmail.com (Sumit Siddharth)
Subject: Buffer Overflow vulnerability in Windows
	Display Manager [Suspected]

I think the problem is with the intel driver and particularly with file
ialmnt5.sys
Hope it helps
Sumit



On 1/3/06, Sumit Siddharth <sumit.siddharth@...il.com> wrote:
>
> Dear All,
> Sorry for the delayed response.
> I  had success in exploiting it remotely by a simple javascript
> <script>window.open("http://aa...");</script>. But i think it doesnt work
> with some drivers.I am using XP ,professional, SP2. and firefox 1.0.6. I
> am using a string of about 53,000 char to overflow the buffer.
> Thanks
> Sumit
>
>


--
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060103/be1105db/attachment.html