lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 6 May 2011 15:51:09 +0200
From: "Mitja Kolsek" <>
To: <>
Subject: Silently Pwning Protected-Mode IE9 and Innocent Windows Applications

Our advanced binary planting research goes on... and it's time to reveal some
interesting hacks, for instance how to exploit binary planting (or DLL hijacking, if
you prefer the less suitable term) to execute remote malicious code through Internet
Explorer 9 in protected mode on Windows 7 - without issuing any security warnings. Or
how to do the same in Internet Explorer 8 on Windows XP, only even more stealthy.

The crux is described in our blog post: or,

while the final missing link to the exploit will be revealed at the Hack in the box
conference in Amsterdam on May 19
(, and shortly
thereafter to the rest of the world.

Our Guidelines for developers have already been updated for those who hate seeing
binary planting, DLL hijacking, DLL preloading or insecure library loading in their
software creations:

Best regards,

Mitja Kolsek

ACROS, d.o.o.
Makedonska ulica 113
SI - 2000 Maribor, Slovenia
tel: +386 2 3000 280
fax: +386 2 3000 282

ACROS Security: Finding Your Digital Vulnerabilities Before Others Do

Powered by blists - more mailing lists