Article View: alt.comp.freeware
Article #485Re: {OT} Windows source code leaked to the internet
From: Binyamin Dissen
Date: Tue, 17 Feb 2004 18:58
Date: Tue, 17 Feb 2004 18:58
35 lines
2622 bytes
2622 bytes
On Mon, 16 Feb 2004 20:26:29 -0600 techie <none@dontspamme.invalid> wrote: :>I've got to head out of town on short notice and may not make it back to :>this thread for a few days, but this is just too good to wait. Notice :>especially the part about how the vulnerability was found. :) :>------------------------------------------------------------- :>http://www.securitytracker.com/alerts/2004/Feb/1009067.html :>SecurityTracker Alert ID: 1009067 :>CVE Reference: GENERIC-MAP-NOMATCH (Links to External Site) :>Date: Feb 15 2004 :>Impact: Execution of arbitrary code via network, User access via network :>Exploit Included: Yes :>Version(s): 5 (6 is reportedly not vulnerable) :>Description: A vulnerability was reported in Microsoft Internet :>Explorer (IE) version 5. A remote user can execute arbitrary code on the :>target system. :>It is reported that a remote user can create a specially crafted bitmap :>file that, when loaded by IE, will trigger an integer overflow and :>execute arbitrary code. Standard buffer overflow problem. MikeRoweSoft has had many of them. And will continue to until they start separating data segments and code segments. -- Binyamin Dissen <bdissen@dissensoftware.com> http://www.dissensoftware.com
Technical Details
Message-ID:
<b0p430ppad66r4r73f1ijpn2st6pc23q52@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cbl212-235-6-165.bb.netvision.net.IL!not-for-mailReferences:
<de4e2e00.0402130836.2176c954@posting.google.com> <c0l023$184srl$1@ID-200043.news.uni-berlin.de> <c0le3r$190cjo$1@ID-151056.news.uni-berlin.de> <pan.2004.02.14.17.28.30.956489@dontspamme.invalid> <jLyXb.39831$A75.18007@bignews5.bellsouth.net> <4031089b$0$3067$61fed72c@news.rcn.com> <pan.2004.02.17.02.24.29.192126@dontspamme.invalid>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112049,dcd95663ab063248
X-Google-Attributes: gid112049,public
X-Google-Thread: 108c83,eec38556d9f58949
X-Google-Attributes: gid108c83,public
X-Google-ArrivalTime: 2004-02-17 10:58:37 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!cbl212-235-6-165.bb.netvision.net.IL!not-for-mail
From: Binyamin Dissen <postingid@dissensoftware.com>
Newsgroups: alt.comp.freeware,aus.computers
Subject: Re: {OT} Windows source code leaked to the internet
Date: Tue, 17 Feb 2004 20:58:35 +0200
Organization: DISSEN Software, Bar & Grill - Israel Ltd.
Lines: 35
Message-ID: <b0p430ppad66r4r73f1ijpn2st6pc23q52@4ax.com>
References: <de4e2e00.0402130836.2176c954@posting.google.com> <c0l023$184srl$1@ID-200043.news.uni-berlin.de> <c0le3r$190cjo$1@ID-151056.news.uni-berlin.de> <pan.2004.02.14.17.28.30.956489@dontspamme.invalid> <jLyXb.39831$A75.18007@bignews5.bellsouth.net> <4031089b$0$3067$61fed72c@news.rcn.com> <pan.2004.02.17.02.24.29.192126@dontspamme.invalid>
NNTP-Posting-Host: cbl212-235-6-165.bb.netvision.net.il (212.235.6.165)
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de 1077044316 46092957 I 212.235.6.165 ([50550])
X-Newsreader: Forte Agent 2.0/32.640