[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] GDIPLUS VULN - MS04-028 - CRASH TEST JPEG [attach]

To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: [Full-Disclosure] GDIPLUS VULN - MS04-028 - CRASH TEST JPEG [attach]
From: "Elia Florio" <eflorio@xxxxxxxxxxx>
Date: Wed, 15 Sep 2004 15:16:25 +0200

<P>Hi list,<BR>this is the JPEG able to reproduce the crash<BR>reported in
the bullettin MS04-028.<BR><A
href="http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx";>http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx</A></P>
<P>Look at FFFE0001 or FFFE0000 signature<BR>in the JFIF header.</P>
<P>Tested on Windows XP Prof SP1 [gdiplus.dll ver 5.1.3097.0]</P>
<P>[eflorio]</P><BR />
<BR
/>
________________________________________________<BR />
Messaggio inviato
da Edizioni Master Webmail<BR />
http://mbox.edmaster.it<BR />

Attachment: CRASH-TEST.zip
Description: Zip compressed data

Prev by Date: [Full-Disclosure] SA04-002 - Apache config file env variable buffer overflow
Next by Date: [Full-Disclosure] GDIPLUS VULN - MS04-028 - CRASH TEST JPEG
Previous by thread: [Full-Disclosure] SA04-002 - Apache config file env variable buffer overflow
Next by thread: [Full-Disclosure] GDIPLUS VULN - MS04-028 - CRASH TEST JPEG
Index(es):
- Date
- Thread