bugtraq - WMF Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: 28 Dec 2005 21:52:17 -0000
From: davidribyrne@...oo.com
To: bugtraq@...urityfocus.com
Subject: WMF Exploit

I apologize if this information has already been posted; I haven’t been able to read all the posts today. Many of the exploit descriptions that I’ve seen reference .WMF files. Like prior GDI exploits, this isn’t strictly true. If the exploit file is named with another graphics extension (i.e. .gif, .jpg, .png, .tif), the GDI library will still read it correctly as a WMF file and execute the exploit. As a result, all common graphics files can carry the exploit.

David Byrne