Vulnerability Development mailing list archives

Re: SEH and overwrite EIP


From: Savio <sena.savio () gmail com>
Date: Sat, 8 Dec 2007 00:54:43 -0200

On 30 Nov 2007 18:38:15 -0000
opexoc () gmail com wrote:

Hello,


I have simple question: assume that there is a buffer overflow
vulnerability in some program, assume that I want to exploit it. Is
it big difference beetwen overwriting SEH and EIP?


Yes, because you need some special conditions in order to take advantage
of an overwritten SEH pointer. Besides, your goal when you overwrite 
SEH is to write arbitrary values to EIP. 

Keep digging and you'll spot the difference. :-)

-- 
Savio


Current thread: