Slashdot Mirror

← Back to Stories (view on slashdot.org)

Exploit Based On Leaked Windows Code Released

Posted by simoniker on from the nda-never-signed dept.

mischief writes "A post to Bugtraq from SecurityTracker.com reports an Internet Explorer 5 exploit that has been released based on the Win2K code leak: 'It is reported that a remote user can create a specially crafted bitmap file that, when loaded by IE, will trigger an integer overflow and execute arbitrary code.' Only affects IE 5 apparently, but still - it didn't take long!"

19 of 952 comments (clear)

  1. oh snap by Anonymous Coward · · Score: -1, Offtopic

    im masturbating!

  2. fp by Anonymous Coward · · Score: -1, Offtopic

    i got first post and you didn't

    1. Re:fp by Anonymous Coward · · Score: -1, Offtopic

      No you didn't, fag.

      Why don't you take the time to think out a somewhat intelligent reply?

    2. Re:fp by Anonymous Coward · · Score: -1, Offtopic

      WRONG, DOUCHEBAG! I WIN!

      Put that in your pipe and smoke it, cock gobbler!

  3. fp? by Anonymous Coward · · Score: -1, Offtopic

    fp?

  4. Re:Funny comment by the bugtraq submitter by LocoSpitz · · Score: -1, Offtopic

    Don't mod parent down. Pointing out text found in the article's link is not trolling, and it is not flamebait.

  5. Re:Leaked Source Code . . . by Anonymous Coward · · Score: -1, Offtopic

    I think it's whack... but I'm not sure.

  6. Re:Dear Mr. Gayer Than Aids by Satan+Dumpling · · Score: 0, Offtopic

    How bout if the virus changes your homepage to hotgaymen.com? Then it's probably gay. :)

  7. Re:Gone.. But Never Forgotten by Anonymous Coward · · Score: -1, Offtopic

    Good thing all thoes Goatse pictures where in .jpeg .gif and .tiff

    This is a rant.

    I know the guy who runs (ran) goatse.cx. IT IS NOT GOATSE -- It is pronounced Goatsex. See, the word is made using the TLD as part of the name. Like pla.net. I cannot believe the masses of people who do not get that. Goatse isn't funny. Goat sex is funny. The hate mail was the part of the site to go to and read, not that anyone got past the main image...

    Posting anon so people won't question how I know so much about goat sex ;-)

  8. off topic, but orthogonal kind of prompted this by n3k5 · · Score: 1, Offtopic

    By the way, does anyone know why the bitmap formap is writte upside down?

    --
    but what do i know, i'm just a model.
  9. Re:Text of advisory by surfcow · · Score: 0, Offtopic
    Anyway, I took a look, and decided that Microsoft is GAYER THAN AIDS .

    Brother, I understand your point, but I really don't like the way you express it. At all.

    I would really like to keep this kind of crap off slashdot. The rest of the internet is a toilet. Save it for there. Thanks.

  10. Re:Open Source More Secure... maybe not by Anonymous Coward · · Score: -1, Offtopic

    mod parrent Insightfull

  11. Re:See! by Anonymous Coward · · Score: -1, Offtopic

    that's funny

  12. I told Microsfot about this exploit two years ago! by Anonymous Coward · · Score: -1, Offtopic

    Well, I can't be sure that this ie exactly the same thing as what I informed them of. But it sure sounds like it is.

    What I informed them of was that I discovered that if I made a very wide bmp, and we're talking tens of thousands of pixels wide, that the image would cause windows itself to crash over and over every time it booted if you clicked the image in exploerer and it got into the mydocuments menu. This was because it was trying to generate a preview of it.

    I surmised that this crash could mean that there was a buffer overflow occuring and I informed Microsoft of this vulnerability. They wrote back one email but never said they fixed it. As a patch has never been issued for Windows 98 for this issue as far as I am aware, that means the vulnerability would still be there regardless of whether the latest version of IE is installed or not.

  13. Re:GAYER THAN AIDS? by Anonymous Coward · · Score: -1, Offtopic

    "because no one honestly believes that AIDS is a gay disesase anymore"

    If you do research, you will see that yes, gay males are still the infected group majority.

    Here are a couple of links.

    http://www.cdc.gov/hiv/pubs/facts/msm.htm
    http: //www.siecus.org/pubs/shop/volume5/shpv50055. html

    Not that I think it will do much good for you, because you can't be totally oblivious.

  14. Re:Open Source More Secure... maybe not by Anonymous Coward · · Score: -1, Offtopic

    Diego ... is that you?

  15. Re:Open Source More Secure... maybe not by Anonymous Coward · · Score: -1, Offtopic

    Demote parent. EVERY bug tracking system has a "wontfix" equivalent. This is just innuendo.

  16. Re:Open Source More Secure... maybe not by OsCarJ · · Score: 0, Offtopic

    You stay the hell away from my sister you pervert!

  17. Re:Open Source More Secure... maybe not by Anonymous Coward · · Score: -1, Offtopic

    mod child unspellful