full-disclosure - Re: Internet Explorer >=5.0 : Buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0306251758140.8223-100000@deneb.intranet.cartel-securite.net>
From: biondi at cartel-securite.fr (Philippe Biondi)
Subject: Re: Internet Explorer >=5.0 : Buffer overflow

On Wed, 25 Jun 2003, SecurITeam BugTraq Monitoring wrote:

> Hi,
>
> I can confirm it under Windows 2000 with IE 5.50.4807.2300
>
> Full control over the EIP, but the shellcode cannot contain (as it currently
> appears) non Alpha Numeric characters, too bad I guess.

http://www.0x36.org/PAPERS/SHELLCODE/p57-0x0f.txt
There is no reason for this to work in the windows world.

-- 
Philippe Biondi <biondi@ cartel-securite.fr> Cartel S?curit?
Security Consultant/R&D                      http://www.cartel-securite.fr
Phone: +33 1 44 06 97 94                     Fax: +33 1 44 06 97 99
PGP KeyID:3D9A43E2  FingerPrint:C40A772533730E39330DC0985EE8FF5F3D9A43E2