full-disclosure - Microsoft Windows LoadImage API Integer buffer overflow patch.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20041229064008.GA55637@mail.sim.pl>
From: bajkero at sec-labs.hack.pl (Artur Byszko)
Subject: Microsoft Windows LoadImage API Integer buffer
	overflow patch.

Hello,

Due to publication of Xfocus' Microsoft Windows LoadImage API Integer
buffer overflow (high risk bug), we decided to release patch for this
vulnerability.
This is the first known patch for this bug and can be downloaded from
http://sec-labs.hack.pl/patch/ico_patch2.zip
Read README before any actions with this code.

Best Regards,
-- 
// Artur Byszko, Sec-Labs Research Team, 0xFA2C0676
// 7C0E 55A0 5039 FD1C 9083  91DB AF4D F474 FA2C 0676
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2212 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041229/708ca5e4/smime.bin