Full Disclosure mailing list archives
Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected]
From: InfoSecBOFH <infosecbofh () gmail com>
Date: Tue, 3 Jan 2006 03:32:29 -0800
I have only replicated this with the intel driver. have tried others and no dice. On 1/3/06, Sumit Siddharth <sumit.siddharth () gmail com> wrote:
I think the problem is with the intel driver and particularly with file ialmnt5.sys Hope it helps Sumit On 1/3/06, Sumit Siddharth <sumit.siddharth () gmail com > wrote:Dear All, Sorry for the delayed response. I had success in exploiting it remotely by a simple javascript <script>window.open("http://aa...");</script>. But i think it doesnt workwith some drivers.I am using XP ,professional, SP2. and firefox 1.0.6. I am using a string of about 53,000 char to overflow the buffer.Thanks Sumit-- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Buffer Overflow vulnerability in Windows Display Manager [Suspected] Sumit Siddharth (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Lise Moorveld (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Stan Bubrouski (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] InfoSecBOFH (Jan 02)
- RE: Buffer Overflow vulnerability in WindowsDisplay Manager [Suspected] Paul (Jan 03)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] ad () heapoverflow com (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Sumit Siddharth (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Sumit Siddharth (Jan 03)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] ad () heapoverflow com (Jan 03)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] InfoSecBOFH (Jan 03)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] InfoSecBOFH (Jan 03)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Stan Bubrouski (Jan 02)
- Re: Buffer Overflow vulnerability in Windows Display Manager [Suspected] Lise Moorveld (Jan 02)
- <Possible follow-ups>
- Buffer Overflow vulnerability in Windows Display Manager [Suspected] casiamo (Jan 02)