If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Win32Help buffer overflow

LoLth · 2010-03-02 10:20:47

seems new vulnerabiliites arent limited to newer software :) there's a buffer overflow vulnerability in older version of windows help that allows remote code execution if the user can be convinced to press F1 while browsing a compromised website (and lets face it, a pop up alert with "press F1 to close" will do for 90% of…

02-03-2010 10:20am

#1

LoLth

Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭

Join Date: February 1998

Posts: 9351

seems new vulnerabiliites arent limited to newer software

there's a buffer overflow vulnerability in older version of windows help that allows remote code execution if the user can be convinced to press F1 while browsing a compromised website (and lets face it, a pop up alert with "press F1 to close" will do for 90% of internet users!)

original (public) release HERE

MS synopsis and advisory HERE

0