Full Disclosure mailing list archives
Re: Windows .ANI LoadAniIcon Stack Overflow
From: wac <waldoalvarez00 () gmail com>
Date: Sun, 1 Apr 2007 12:13:53 -0400
On 4/1/07, Larry Seltzer <Larry () larryseltzer com> wrote:
>>The issue is that this only works with DEP turned off! Interesting point. I haven't seen this mentioned anywhere, including the Microsoft advisory (http://www.microsoft.com/technet/security/advisory/935423.mspx). Has anyone actually tested this with DEP on/off to be sure?
Yes, winhex uses the function when you open the .ani and I don't have it running with DEP turned on and the same goes for firefox that also leaves the file openend when I openen web link dev sent me (already tested winhex with the address of exitprocess that btw seems to float around from system to system since the version dev sent me does not works for me and it works like a charm when I built it). I was talking with dev code about DEP bypassing btw, we think that is possible to exploit even with >> DEP ON <<. Just ideas for now. Larry Seltzer
eWEEK.com Security Center Editor http://security.eweek.com/ http://blog.eweek.com/blogs/larry_seltzer/ Contributing Editor, PC Magazine larryseltzer () ziffdavis com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Windows .ANI LoadAniIcon Stack Overflow, (continued)
- Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Peter Ferrie (Apr 04)
- Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 08)
- Re: Windows .ANI LoadAniIcon Stack Overflow wac (Apr 08)
- Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Brooks, Shane (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Knud Erik Højgaard (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Chris Lyon (Apr 01)
- Re: Windows .ANI LoadAniIcon Stack Overflow dev code (Apr 01)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 01)
- Re: Windows .ANI LoadAniIcon Stack Overflow James Matthews (Apr 01)