Re: [Full-disclosure] Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly

[Tavis Ormandy <taviso@xxxxxxxxxxxxx>]

On Thu, Jun 10, 2010 at 07:21:48PM +0200, Tavis Ormandy wrote:
> On Thu, Jun 10, 2010 at 07:02:03PM +0200, Thomas Kristensen wrote:
> > Tavis,
> > 
> > Nice find, but during our analysis we discovered that your hotfix
> > unfortunately is inadequate.
> > 
> > For more information see:
> > http://secunia.com/blog/103/
> > 
> 
> Patches are, of course, welcome.
> 
> Thanks, Tavis.

Thomas, on some examination, your theory looks accurate, good catch :-)

This doesnt seem unsurmountable, but I'm reluctant to update the patch
which was only intended as a last resort. I'll work on some ideas to
address this.

If you have any thoughts, please let me know.

Thanks, Tavis.

-- 
-------------------------------------
taviso@xxxxxxxxxxxxx | pgp encrypted mail preferred
-------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/