bugtraq - Re: Binary Planting Goes "EXE"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <AANLkTinQ4h=Yfpg0dDMoj6Cnm4+te4uCzGxAdibKR1oP@mail.gmail.com>
Date: Thu, 9 Sep 2010 22:18:13 +0200
From: Christian Sciberras <uuf6429@...il.com>
To: security@...ossecurity.com
Cc: bugtraq@...urityfocus.com, NTBUGTRAQ@...tserv.ntbugtraq.com,
	cert@...t.org, si-cert@...es.si
Subject: Re: Binary Planting Goes "EXE"

For what it's worth (to your research) there are also hybrids; ie, a
normal executable can be executed from a dll perspective, as the other
way round; they're the same format.
Executables simply have a specific "standard" entry point.

Thought I'd remind you that this "vuln" might exist in less known
places; who knows, even perhaps kernel drivers.

Cheers,
Chris.




On Thu, Sep 9, 2010 at 2:04 AM, ACROS Security Lists <lists@...os.si> wrote:
>
> For everyone interested in binary planting vulnerabilities, here's some new
> information on the EXE vector from our research.
>
> http://blog.acrossecurity.com/2010/09/binary-planting-goes-exe.html
>
> Pleasant reading,
>
> Mitja Kolsek
> CEO&CTO
>
> ACROS, d.o.o.
> Makedonska ulica 113
> SI - 2000 Maribor, Slovenia
> tel: +386 2 3000 280
> fax: +386 2 3000 282
> web: http://www.acrossecurity.com
>
> ACROS Security: Finding Your Digital Vulnerabilities Before Others Do
>
>
>