来源：milw0rm
MS Windows Animated Cursor (.ANI) Remote Exploit (eeye patch bypass)
..::[ jamikazu presents ]::..
Windows Animated Cursor Handling Exploit (0day) (Version3)
Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)
Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows XP SP2
(It also must to work on all nt based windows but not tested)
Update: It also bypass eeye security ani patch!
Author: jamikazu
Mail: [email protected]
Bug discovered by determina (http://www.determina.com)
Credit: milw0rm,metasploit, SkyLined, http://doctus.net/
invokes calc.exe if successful
EXP： 04012007-exp.zip
ZERT出的新补丁： executables.rar
源码： anipatcher.rar
解压密码： ZERT
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论