bugtraq - Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1056288382.20060218160434@SECURITY.NNOV.RU>
Date: Sat, 18 Feb 2006 16:04:34 +0300
From: 3APA3A <3APA3A@...URITY.NNOV.RU>
To: porkythepig@...pi.pl
Cc: bugtraq@...urityfocus.com
Subject: Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.

Dear porkythepig@...pi.pl,

This  is  a  case  of  'real' stack structure overflow, not stack buffer
overflow  (stack  overrun)  as  you  maybe  think. The process' stack is
exhausted  because  of recursive call. Exploitation of this situation to
execute code may be hard, if possible.

-- 
~/ZARAZA
http://www.security.nnov.ru/

--Thursday, February 16, 2006, 8:14:50 PM, you wrote to bugtraq@...urityfocus.com:

pap> It also doesn't need the call to be strictly recurrent, any infinte
pap> call-loop  (even  across  JScript and VBScript functions) or finite
pap> but  deep  enough  to  consume  all the IE thread stack memory will
pap> exploit this vulnerability as well.

pap> DoS attack as well as remote code execution are possible.