|
Microsoft RPCSS DCERPC DCOM Object Activation Packet Length Heap Corruption Vulnerability
CORE has developed a working commercial exploit for their IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild. It should be noted that eEye has developed an exploit for this issue, however it has not been made publicly available. Further analysis of the exploit previously available here, has concluded that it is actually for the long filename heap overflow described in BID 8459. ** UPDATE: Exploit activity for this vulnerability has been observed by a Symantec DeepSight honeypot. |
|
 Privacy Statement |
