bugtraq - Re: Half-Life 2 source code stolen through IE exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <004401c389f8$54eb0910$3200000a@pluto>
Date: Fri, 03 Oct 2003 23:50:16 +0200
From: jelmer <jkuperus@...net.nl>
To: Thor Larholm <thor@...x.com>, spackard@...tlink.com
Cc: bugtraq@...urityfocus.com
Subject: Re: Half-Life 2 source code stolen through IE exploit


Actually there have been a couple, just of of the top of my head there's

quartz.dll overflow

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-07/0301.html

urlmon.dll overflow

http://lists.insecure.org/lists/bugtraq/2003/Jul/0019.html

and then  0day also doesn't exist right ?

I dont think there's cause for this kind of speculation.

--jelmer


----- Original Message ----- 
From: "Thor Larholm" <thor@...x.com>
To: <spackard@...tlink.com>
Cc: <bugtraq@...urityfocus.com>
Sent: Friday, October 03, 2003 9:10 PM
Subject: RE: Half-Life 2 source code stolen through IE exploit


There hasn't been an Outlook vulnerability for years, the only
vulnerabilities you can exploit these days in Outlook are the ones that
are caused by the fact that Outlook uses IE to render HTML mails.

Hence the speculation on my part ;)


Thor

-----Original Message-----
From: spackard@...tlink.com [mailto:spackard@...tlink.com]
Sent: Friday, October 03, 2003 11:12 AM
To: Thor Larholm
Cc: bugtraq@...urityfocus.com
Subject: Re: Half-Life 2 source code stolen through IE exploit


Um, the way that site reads it was a buffer overflow
in Outlook.  The thread's author just mentions IE as an aside.

Regards, Scott

On Fri, 3 Oct 2003, Thor Larholm wrote:

> Date: Fri, 3 Oct 2003 01:19:18 -0700
> From: Thor Larholm <thor@...x.com>
> To: bugtraq@...urityfocus.com
> Subject: Half-Life 2 source code stolen through IE exploit
>
> http://www.halflife2.net/forums/showthread.php?s=e6e7d0ce0abe19997425e
> f50fa7fe1df&threadid=10692
>
>
>
> Regards
> Thor Larholm
> PivX Solutions, LLC - Senior Security Researcher
> http://pivx.com/larholm/unpatched - 31 Unpatched IE Security
> Vulnerabilities
>

--