[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
- To: "full-disclosure@xxxxxxxxxxxxxxxx"@netsys.com, "bugtraq@xxxxxxxxxxxxxxxxx"@netsys.com
- Subject: Re: Rv: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
- From: Mihai Novitchi <mnovitchi@xxxxxxxxxxxxxxx>
- Date: Tue, 2 Nov 2004 17:52:15 +0200
Hello Elia,
Tuesday, November 2, 2004, 3:32:45 PM, you wrote:
EF> PS: after testing the xploit, Windows increased the swap
EF> file dimension sayin' VM memory too low, is this a side-effect of
EF> exploit?
This is a side effect. The JS used in the PoC allocates a lot of memory to
make sure that the needed data is in place at 0x0D0D0D0D.
The total amount is something like 700 * 0x40000 * 4 (~700mb)
--
Best regards,
Mihai mailto:mnovitchi@xxxxxxxxxxxxxxx
--
This message was scanned for spam and viruses by BitDefender
For more information please visit http://www.bitdefender.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html