Bugtraq mailing list archives
Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.
From: 3APA3A <3APA3A () SECURITY NNOV RU>
Date: Sat, 18 Feb 2006 16:04:34 +0300
Dear porkythepig () anspi pl, This is a case of 'real' stack structure overflow, not stack buffer overflow (stack overrun) as you maybe think. The process' stack is exhausted because of recursive call. Exploitation of this situation to execute code may be hard, if possible. -- ~/ZARAZA http://www.security.nnov.ru/ --Thursday, February 16, 2006, 8:14:50 PM, you wrote to bugtraq () securityfocus com: pap> It also doesn't need the call to be strictly recurrent, any infinte pap> call-loop (even across JScript and VBScript functions) or finite pap> but deep enough to consume all the IE thread stack memory will pap> exploit this vulnerability as well. pap> DoS attack as well as remote code execution are possible.
Current thread:
- Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines. porkythepig (Feb 17)
- Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines. 3APA3A (Feb 18)