bugtraq - Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070402000247.21391.qmail@securityfocus.com>
Date: 2 Apr 2007 00:02:47 -0000
From: jamikazu@...il.com
To: bugtraq@...urityfocus.com
Subject: Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)

Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)

Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows XP SP2 
(It also must to work on all nt based windows but not tested)

Update: It also bypass eeye security ani patch!

Author: jamikazu 
Mail: jamikazu@...il.com

Bug discovered by determina (http://www.determina.com)

Credit: milw0rm,metasploit, SkyLined, http://doctus.net/

invokes calc.exe if successful 

Note: do not open link in new tab with ie7 ,start new iexplorer.exe and past it.
hxxp://jamikazu.110mb.com/ani_exploit/ani_exp.htm

Regards,
Jamikazu