Re: GREENAPPLE Release

[Sinan Eren <sinan.eren () immunitysec com>]

My brief analysis back in the day when Dave blue-screen'ed 
his box was that, this is a clean kernel stack overflow. With cpl of 
tweaks in the payload i was able to get eip/ebp control. We didnt have 
time back than to write a full blown exploit, hoping that the bug might 
live for many more years to come ;-(

Thanks,
Sinan Eren
Immunity, Inc. Research




On Tue, 8 Feb 2005, Dave Aitel wrote:

> Reference: http://lists.virus.org/dailydave-0411/msg00028.html
>
> This is a quick announcement that the recent Microsoft patch (MS-05- has 
> fixed a vulnerability I found a while back in SMB. 
> (http://www.microsoft.com/technet/security/bulletin/ms05-011.mspx)
>
> More information on this vulnerability is available at: 
> https://www.immunitysec.com/resources-advisories.shtml
>
> Thanks,
> Dave Aitel
> Immunity, Inc.
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> https://lists.immunitysec.com/mailman/listinfo/dailydave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave