full-disclosure - IE Object Type Overflow Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030709122316.GA31445@felinemenace.org>
From: ash at felinemenace.org (ash@...inemenace.org)
Subject: IE Object Type Overflow Exploit

                     _,'|             _.-''``-...___..--';)
                     /_ \'.      __..-' ,      ,--...--'''
                    <\    .`--'''       `     /'
                    `-';'               ;   ; ;
               __...--''     ___...--_..'  .;.'
           fL (,__....----'''       (,..--''  felinemenace.org

Attached is an exploit for the Internet Explorer Object type  overflow found
by eEye.

This exploit uses more than 56 bytes for payload unlike the only other publicly
released exploit i could find by Sir Alumni.

More details can be found within the archive.
Please read the text file before running this exploit, keep in mind it does
download a trojan.

-FelineMenace

-------------- next part --------------
A non-text attachment was scrubbed...
Name: fm-IE.tar
Type: application/x-tar
Size: 10240 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030709/f2427791/fm-IE.tar