SecurityFocus

Win32hlp exploit for : ":LINK overflow" Mar 09 2003 12:38AM
descript (descript sv98 s0h cc) (1 replies)

hi list,

In date Sunday, 9 March, 2003 1:00 AM s0h released an exploit : Win32hlp exploit for : ":LINK overflow"

Source : http://s0h.cc/exploit/s0h_Win32hlp.c
Binary : http://s0h.cc/exploit/s0h_Win32hlp.exe

Discovered by ThreaT <threat (at) s0h (dot) cc [email concealed]>.
Coded by ThreaT <threat (at) s0h (dot) cc [email concealed]>
Hompage : http://s0h.cc/~threat/

This exploit can trap a .CNT file (file with .HLP files) with the arbitrary code who can download and execute a trojan without user ask.

This exploit was tested on :
- Windows 2000 PRO/SERVER (fr) SP0
- Windows 2000 PRO/SERVER (fr) SP1
- Windows 2000 PRO/SERVER (fr) SP2

Best regards,
descript <descript (at) s0h (dot) cc [email concealed]>
s0h - Skin of humanity
http://s0h.cc

[ reply ]

RE: Win32hlp exploit for : ":LINK overflow" Mar 11 2003 01:59PM
Rob Shein (shoten starpower net) (1 replies)

RE: Win32hlp exploit for : ":LINK overflow" Mar 13 2003 12:12PM
Josh Gilmour (jgilmour attbi com) (2 replies)

RE: Win32hlp exploit for : ":LINK overflow" Mar 13 2003 05:09PM
Rob Shein (shoten starpower net) (1 replies)

RE: Win32hlp exploit for : ":LINK overflow" Mar 13 2003 05:29PM
Josh Gilmour (jgilmour attbi com)

RE: Win32hlp exploit for : ":LINK overflow" Mar 13 2003 01:13PM
Rob Shein (shoten starpower net)