full-disclosure - info about recent Ms issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat Apr 15 10:50:05 2006
From: c0ntexb at gmail.com (c0ntex)
Subject: info about recent Ms issue

On 14/04/06, ad@...poverflow.com <ad@...poverflow.com> wrote:
> this is not a vulnerability for MS because the .hlp file is a script
> file and they believe that's not secured at all, c0ntex just posted a
> fresh advisory of something wich has been found years ago, disclosed
> hundred of times, but he looks to have time to loose.

Where is the "heap overflow" in Windows Help that has been discussed
thousands of times? I never once discussed the scriptable issue with
.hlp files because that is not my interest, my interest is in
manipulating process execution by overwriting memory.

Your english is good enough to talk bollox but obviously not good
enough to read.

Anyway, 4 more Windows heap overflows coming on their way just
awaiting your criticism  :-)

--

regards
c0ntex