| To: | bugtraq@securityfocus.com |
|---|---|
| Subject: | Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) |
| From: | Alexander Sotirov <asotirov@determina.com> |
| Date: | Sat, 31 Mar 2007 02:26:28 -0700 |
| Cc: | full-disclosure@lists.grok.org.uk |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| In-reply-to: | <460CA5CB.8080905@determina.com> |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
| References: | <460CA5CB.8080905@determina.com> |
| User-agent: | Thunderbird 1.5.0.10 (Windows/20070221) |
Since exploit code has already been posted to Full-Disclosure, we are going to release an advisory with more technical details about the vulnerability. Enjoy: http://www.determina.com/security.research/vulnerabilities/ani-header.html Alex
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Windows .ANI Stack Overflow Exploit, devcode29 |
|---|---|
| Next by Date: | PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC, UniquE |
| Previous by Thread: | RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038), Eric Sites |
| Next by Thread: | CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability, M. Shirk |
| Indexes: | [Date] [Thread] [Top] [All Lists] |