Bugtraq mailing list archives
Tiny3 vs Winhelp32 Bof
From: "Brett Moore" <brett () softwarecreations co nz>
Date: Mon, 19 Aug 2002 14:14:02 +1200
No so much a bug, more an issue of another default installation setup. After writing an exploit for the winhelp32, I tested on a pc that had Tiny 2 installed. As I expected Tiny stopped the outbound connection. Testing on a Tiny 3 version had no warnings of the outbound connection. Upon investigation it was found that winhelp32.exe is by default a harmless application and therefore has full access no rules. harmless application? Ever seen one of those?
Current thread:
- Tiny3 vs Winhelp32 Bof Brett Moore (Aug 19)