🚀 go-pugleaf

On Mon, 16 Feb 2004 13:24:30 -0500, Chris Lee wrote:

> In article <jLyXb.39831$A75.18007@bignews5.bellsouth.net>, 
> lhorwinkleNOSPAM@NOSPAMusa.com says...
>>
>>
>>"techie" <none@dontspamme.invalid> wrote in message
>>news:pan.2004.02.14.17.28.30.956489@dontspamme.invalid...
>>> On Sat, 14 Feb 2004 15:18:05 +0000, Phred wrote:
>>
>>> By contrast, Windows was developed in secret without all that
>>> scutiny, and
>>in
>>> the expectation by its developers that their source code would
>>> remain
>>hidden
>>> from the world.
>>
>>Just because Windows is a proprietary product doesn't mean it didn't
>>get
>>scrutiny.  And to imply that MS software developers are less capable
>>than
>>those who participated in Linux development is just dogma and
>>cliche.
>>
>>
> 
> MyDOOM and other such Windows malware proves you wrong. Microsoft
> was warned from day 1 they started including HTML and other crap
> in their email software that nothing but trouble would result from 
> it.
> 
> Before Outlook and other such crap from Microsoft, you literally could
> not infect a system with a virus by reading email.

I've got to head out of town on short notice and may not make it back to
this thread for a few days, but this is just too good to wait. Notice
especially the part about how the vulnerability was found.  :)

-------------------------------------------------------------
http://www.securitytracker.com/alerts/2004/Feb/1009067.html

SecurityTracker Alert ID:  1009067
CVE Reference:  GENERIC-MAP-NOMATCH   (Links to External Site)

Date:  Feb 15 2004

Impact:  Execution of arbitrary code via network, User access via network

Exploit Included:  Yes  
Version(s): 5 (6 is reportedly not vulnerable)

Description:  A vulnerability was reported in Microsoft Internet
Explorer (IE) version 5. A remote user can execute arbitrary code on the
target system.

It is reported that a remote user can create a specially crafted bitmap
file that, when loaded by IE, will trigger an integer overflow and
execute arbitrary code.

The author states that this flaw was found by reviewing the recently
leaked Microsoft Windows source code. The flaw reportedly resides in
'win2k/private/inet/mshtml/src/site/download/imgbmp.cxx'.

The report indicates that IE 5 is affected but that IE 6 is not
affected.

A demonstration exploit is provided in the Source Message [it is Base64
encoded].  

Impact:  A remote user can cause arbitrary code to be executed on the
target user's computer when the target user's browser loads a specially
crafted bitmap file. The code will run with the privileges of the target
user.  Solution:  No solution was available at the time of this entry.

-------------------------------------------------------------