BugTraq
Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC Sep 29 2005 04:15AM
warl0ck linuxmail org (1 replies)
Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC Sep 29 2005 09:41PM
Paul Laudanski (zx castlecops com)
On 29 Sep 2005 warl0ck (at) linuxmail (dot) org [email concealed] wrote:

> It is issue with almost all the firewalls
> firewalls don't protect the running applications
> themselves.I think i don't get is what does it
> have to do with DDE ?.Also one can read firewall
> ACL from the settings and inject code into the
> running trusted process.

This "exploit" was tested by members at CastleCops and found to be untrue:

http://castlecops.com/postlite134369-.html

Snapshots also provided.

--
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops(SM), http://castlecops.com

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus