full-disclosure - GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5.0.0.25.2.20040215123925.040516e0@pop3.direcway.com>
From: madsaxon at direcway.com (madsaxon)
Subject: GAYER THAN AIDS ADVISORY #01: IE 5  remote code
 execution

At 10:08 PM 2/14/2004 -0800, gta@...h.com wrote:

>.. Rrrrriiiiggghhhttt.  Way to go, using a signed integer for an
>offset.  Now all we have to do is create a BMP with bfOffBits > 2^31,

I would caution everyone against assuming that this code has not
been altered since it left the confines of Redmond. If I were
to steal Microsoft code and release it to the Internet, I'd be
tempted to make a few strategic modifications first, just to
stir things up.  Especially if I were, shall we say, not exactly
a Microsoft fan...

m5x