Full Disclosure mailing list archives

Re: Rv: MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))


From: Mihai Novitchi <mnovitchi () bitdefender com>
Date: Tue, 2 Nov 2004 17:52:15 +0200

Hello Elia,

Tuesday, November 2, 2004, 3:32:45 PM, you wrote:

EF> PS: after testing the xploit, Windows increased the swap
EF> file dimension sayin' VM memory too low, is this a side-effect of
EF> exploit?

This is a side effect. The JS used in the PoC allocates a lot of memory to
make sure that the needed data is in place at 0x0D0D0D0D.
The total amount is something like 700 * 0x40000 * 4 (~700mb)

-- 
Best regards,
 Mihai                            mailto:mnovitchi () bitdefender com



-- 
This message was scanned for spam and viruses by BitDefender
For more information please visit http://www.bitdefender.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: