full-disclosure - "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

[an error occurred while processing this directive]

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <001501c613b6$e979b140$16b2a8c0@Magdalena>
Date: Sat Jan  7 18:22:58 2006
From: FistFuXXer at gmx.de (FistFucker)
Subject: "WinProxy 6.0 R1c" Remote Stack/SEH Overflow
	Exploit

The PoC exploit for this issue is attached to this e-mail. It has been
successfully tested under Microsoft Windows XP Professional (german, SP2).
Remote attackers can bypass the SEH frames protection of the operating
system by calling a POP/POP/RET sequence in the dynamic link libraries of
the Panda Antivirus scanning engine.

-FistFucker (aka FistFuXXer)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CAN-2005-4085_exploit.pl
Type: application/octet-stream
Size: 2917 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060107/c950d014/CAN-2005-4085_exploit.obj