[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FD] Microsoft Windows "LoadUvsTable()" Buffer Overflow Vulnerability
- To: fulldisclosure@xxxxxxxxxxxx
- Subject: [FD] Microsoft Windows "LoadUvsTable()" Buffer Overflow Vulnerability
- From: Hossein Lotfi <hossein.lotfi.all@xxxxxxxxx>
- Date: Wed, 15 Mar 2017 10:50:18 +0100
Hello,
The details of this vulnerability can be found here if interested:
http://blogs.flexerasoftware.com/secunia-research/2016/12/microsoft_windows_loaduvstable_heap_based_buffer_overflow_vulnerability.html
Microsoft initially tried to fixed the issue in MS16-147, but the fix was
incomplete and the issue remained unpatched til Microsoft March 2017 patch
release.
https://twitter.com/hosselot/status/809059287037251584
It appears MS17-013 finally fixed the vulnerability properly.
https://technet.microsoft.com/en-us/library/security/ms17-013.aspx
cheers.
@hosselot
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/