Microsoft .NET Framework SDK MSIL工具堆溢出漏洞

Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework SDK的ildasm在反汇编DLL文件时存在堆溢出漏洞，导致在反汇编特制的DLL时可能出现拒绝服务。 出现异常的部分如下： pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size; if pvReturn == NULL cmp dword ptr pvReturn,ebx jne $L19640+1 7C3423B6h pvReturn = HeapAlloccrtheap, HEAPZEROMEMORY, size...

Buffer overflow

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method...

CVE-2006-1510

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method...

CVE-2006-1510

CVE-2006-1510 describes a buffer overflow in calloc.c within Windows XP SP2 ntdll.dll that is triggered when the ILDASM disassembler is used from the .NET 1.0/1.1 SDK. A crafted DLL file with a large static method could allow user‑assisted attackers to execute arbitrary code. The description spec...