full-disclosure - Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: psz at maths.usyd.edu.au (Paul Szabo)
Subject: Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code

KF <dotslash@...soft.com> wrote:

>>     sec-labs team proudly presents:
>>     Buffer overflow vulnerability in Adobe Acrobat Reader 5.0.7 ...
>>     There is buffer overflow vulnerability in WWWLaunchNetscape function.
>>     ...
> 
> I could not reproduce this ... on linux ...
> 
> I was instead old "A browser has not been specified. Do you want to
> configure Weblink Prefrences?"  I set the browser to mozilla and had
> no luck with the overflow... just a mozilla mail with a HUGE mail to: line.

Set your browser to Netscape, not Mozilla.

Cheers,

Paul Szabo - psz@...hs.usyd.edu.au  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia