Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
From: H D Moore <sflist@xxxxxxxxxxxxxxxxxx>
Date: Thu, 7 Jun 2007 10:34:17 -0500
Cc: "Dennis Rand" <rand@xxxxxxx>
In-reply-to: <C81131AE0CE8FC48B5B3D1F888FE33A3976040@xxxxxxxxxxxxxxx>
References: <C81131AE0CE8FC48B5B3D1F888FE33A3976040@xxxxxxxxxxxxxxx>
User-agent: KMail/1.9.3

Looks like this mangled ICO will also kill Gimp :-) [2.3.14]

On Thursday 07 June 2007 04:21, Dennis Rand wrote:
> Further exploitation has not been verified.

References:
- CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
  - From: Dennis Rand

Prev by Date: Re: uTorrent overflow
Next by Date: MIT krb5: makes sudo authentication issue MUCH worse.
Previous by thread: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
Next by thread: W1L3D4 WEBmarket Remote SQL İnjection
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux