Full Disclosure mailing list archives

Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)


From: Dan Kaminsky <dan () doxpara com>
Date: Tue, 7 Sep 2010 02:23:25 -0400

excuse me, kdbx.  same difference


On Tue, Sep 7, 2010 at 2:23 AM, Dan Kaminsky <dan () doxpara com> wrote:

So, what's the security model around .ygwx files?


On Tue, Sep 7, 2010 at 1:57 AM, YGN Ethical Hacker Group <lists () yehg net>wrote:

The fixed version KeePass 2.13 has been released.

http://keepass.info/news/n100906_2.13.html

But failure to describe "DLL Hijacking was fixed".

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: