Re: "windows update activex"

[Georgi Guninski <guninski () guninski com>]

Liu Die Yu wrote:
> BUT it's hard for the attacker to execute his EXE.
> i've traced into the module("IUENGINE.TEXT").

Has someone tried downgrading windoze by installing old signed stuff (probably a
very old m$ patch as exe will do, or just some old signed installer from m$)?
After downgrading, old bugs start working.

georgi



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html