Vulnerability Development mailing list archives

Re: MS05-039


From: A A <hd78432 () yahoo com>
Date: Wed, 28 Sep 2005 18:44:16 -0700 (PDT)

Does anyone know the memory address in umpnpmgr.dll
where the overflow exception is thrown in the
exception block (in windows 2000)?  I don't have a
windows 2000 box that I can buffer overflow with a
debugger.
I'm testing in an environment other than Windows 2000
and I have been able to determine it's not in the
strcpy functions that have 2 parameters and no bounds
checking (based upon what I am seeing).


        
                
______________________________________________________ 
Yahoo! for Good 
Donate to the Hurricane Katrina relief effort. 
http://store.yahoo.com/redcross-donate3/ 


Current thread: