full-disclosure - Security Bug in MSVC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Jan 17 23:14:02 2006
From: jasonc at science.org (Jason Coombs)
Subject: Security Bug in MSVC

Morning Wood wrote:
> ------------------------------------------------------------
>      - EXPL-A-2006-002 exploitlabs.com Advisory 048 -
> ------------------------------------------------------------
> 
>               - MSVC 6.0 run file bug -

Nice thinking, Donnie. This must be the "new class of vulnerability" 
that was hinted at by Microserfs a few months ago... The attacks are 
launched by way of source code distributions rather than binary code.

Sweet As.

Jason Coombs
jasonc@...ence.org