Re[4]: ASN.1 Vulnerability Could Allow Code Execution(828028); Microsoft Security Bulletin MS04-007

[Halvar Flake <halvar () gmx de>]

Hey Brett,

BM> Of course reverse enginerring all the dlls/functions and reviewing the code
BM> while been extremely time cosuming, could turn up gold... Perhaps its just
BM> a matter of knowing 'where to look'....

Perhabs we need a better approach to know on what to focus. Perhabs
"ranking" DLL's by importance wouldn't be a bad idea (importance being
the number of applications using the DLL and passing user data into
it... LZ32.DLL anyone ?), then taking the most important DLL and
auditing it first. The pleasures of modularisation and
code reuse.

Anyhow, I _really_ should get back to my studies :)

Cheers,
Halvar

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave