3APA3A
09/11/06, 14:07
Dear Jerome Athias,
I said NULL pointer is not exploitable _by itself_. Ability to control
unhandled exception filter is different vulnerability. NULL pointer in
this case is not exploitation vector, it's only used to initiate attack.
--Thursday, November 2, 2006, 10:01:19 PM, you wrote to 3APA3A@SECURITY.N=
NOV.RU:
JA> 3APA3A a =E9crit :
>> Dear xxxx@gmail.com,
>>
>> NULL pointer dereference is not exploitable to code execution by itsel=
f.
>>
>> =20
JA> Hi,
JA> you should be interested by this
JA> http://metasploit.blogspot.com/2006/08/putting-fun-in-browser-fun.htm=
l
JA> + a little tool
JA> https://www.securinfos.info/outils-securite-hacking/uSEH.rar
JA> /JA
--=20
~/ZARAZA
=CD=E5=EF=F0=E8=FF=F2=ED=EE=F1=F2=E8 =ED=E0=F7=ED=F3=F2=F1=FF =E2 =E2=EE=F1=
=E5=EC=FC. (=D2=E2=E5=ED)
I said NULL pointer is not exploitable _by itself_. Ability to control
unhandled exception filter is different vulnerability. NULL pointer in
this case is not exploitation vector, it's only used to initiate attack.
--Thursday, November 2, 2006, 10:01:19 PM, you wrote to 3APA3A@SECURITY.N=
NOV.RU:
JA> 3APA3A a =E9crit :
>> Dear xxxx@gmail.com,
>>
>> NULL pointer dereference is not exploitable to code execution by itsel=
f.
>>
>> =20
JA> Hi,
JA> you should be interested by this
JA> http://metasploit.blogspot.com/2006/08/putting-fun-in-browser-fun.htm=
l
JA> + a little tool
JA> https://www.securinfos.info/outils-securite-hacking/uSEH.rar
JA> /JA
--=20
~/ZARAZA
=CD=E5=EF=F0=E8=FF=F2=ED=EE=F1=F2=E8 =ED=E0=F7=ED=F3=F2=F1=FF =E2 =E2=EE=F1=
=E5=EC=FC. (=D2=E2=E5=ED)