bugtraq - Re: .MHT Buffer Overflow in Internet Explorer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 11 Mar 2003 17:13:21 -0000
From: "http-equiv@...ite.com" <http-equiv@...ware.com>
To: <bugtraq@...urityfocus.com>
Subject: Re: .MHT Buffer Overflow in Internet Explorer

<!-- 
The following sample format contains malformed MIME header along with 
the Base64 encoded executable.

---------------------------------------------- 
MIME-Version: 1.0 
------=_NextPart_000_0000_01C2E1F4.0D559EA0 
Content-Location:file:///tomatell.exe 
Content-Transfer-Encoding: base64 

TVpQ 
---------------------------------------------- 

 -->

Excellent!

Yes, there has always been something suspicious about that spot. 
Simply writing the word [header] GIF89a in the same spot will create 
an empty image container:

------phuquedup.mhtml-----

MIME-Version: 1.0 
Content-Transfer-Encoding: 7bit 

GIF89a

------phuquedup.mhtml-----

End Call

-- 
http://www.malware.com