full-disclosure - Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <8a6b8e350703301246g55828ac3v501c81ce38f6d372@mail.gmail.com>
Date: Fri, 30 Mar 2007 12:46:18 -0700
From: "James Matthews" <nytrokiss@...il.com>
To: 3APA3A <3APA3A@...urity.nnov.ru>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [VulnWatch] Microsoft Windows Vista Slideshow
	Unspecified Blue Screen Of Death Vulnerability

Now all we need is an exploit... I am thinking why isn't there a Month of
windows bugs..

On 3/30/07, 3APA3A <3APA3A@...urity.nnov.ru> wrote:
>
> Dear Michaі Majchrowicz,
>
> This  image  also  effectively  exploits stack overflow (?) in FastStone
> Image Viewer 2.8, EIP/EBP is 0x41414141.
>
> --Monday, March 26, 2007, 12:20:07 AM, you wrote to
> vulndiscuss@...nwatch.org:
>
> MM> Everytime  you  try  to turn on the slideshow with a JPG file in the
> MM> folder                  you                 get                 BSoD
> MM> (http://sectroyer.110mb.com/vuln/vista_bsod.jpg). You can test it by
> MM> turning    on    the   slideshow   in   the   following   directory:
> MM> c:Windows\Web\Wallpaper\  Since  this  case  cannot  be connect with
>
>
> --
> ~/ZARAZA http://securityvulns.com/
> Патриотизм - это та же религия. (Твен)
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
http://www.goldwatches.com/watches.asp?Brand=39
http://www.wazoozle.com

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/