full-disclosure - Control EDX/EAX in JPG Heap Overflow (MS04-028)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <cf6ad9f904092120062c7815e3@mail.gmail.com>
From: PERFECT.MATERIAL at gmail.com (Anonymous User)
Subject: Control EDX/EAX in JPG Heap Overflow (MS04-028)

Dear Italian Elf,

You wrote: 
> In this point we can control the value of EDX (it's overwritten by
> "CCCC" 0x43434343 dword inside JPEG header), but it's difficult escape
> from the heap and take the full control on execution.

I also have difficulty escape from the heap.  Maybe we can do lunch some time?

PERFECT.MATERIAL