MS Windows XP Animated Cursor (.ANI) Remote Overflow Exploit 2

🗓️ 02 Apr 2007 00:00:00Reported by RootType

MS Windows XP Animated Cursor (.ANI) Remote Overflow Exploit author Trirat Puttaraksa tested on Windows XP SP2 fully patched + IE 6 SP2 educational purpose only exploit calls calc.ex


                                                Microsoft&nbsp;ANI&nbsp;Buffer&nbsp;Overflow&nbsp;Exploit

Author:&nbsp;Trirat&nbsp;Puttaraksa
http://sf-freedom.blogspot.com

Tested&nbsp;on:&nbsp;Windows&nbsp;XP&nbsp;SP2&nbsp;fully&nbsp;patched&nbsp;+&nbsp;IE&nbsp;6&nbsp;SP2

For&nbsp;educational&nbsp;purpose&nbsp;only

There&nbsp;are&nbsp;many&nbsp;confuses&nbsp;about&nbsp;this&nbsp;vulnerability.&nbsp;Someone&nbsp;said&nbsp;that&nbsp;this&nbsp;could
not&nbsp;be&nbsp;exploited&nbsp;in&nbsp;XP&nbsp;SP2&nbsp;-&nbsp;that's&nbsp;wrong.&nbsp;I&nbsp;provide&nbsp;this&nbsp;exploit&nbsp;because&nbsp;I&nbsp;
wanna&nbsp;to&nbsp;tell&nbsp;these&nbsp;people&nbsp;that&nbsp;they&nbsp;are&nbsp;in&nbsp;danger.&nbsp;
This&nbsp;exploit&nbsp;will&nbsp;call&nbsp;calc.exe&nbsp;(shellcode&nbsp;fome&nbsp;metasploit&nbsp;win32_exec&nbsp;
CMD=calc.exe&nbsp;EXITFUNC=process).

P.S.&nbsp;I&nbsp;do&nbsp;not&nbsp;include&nbsp;the&nbsp;source&nbsp;code&nbsp;for&nbsp;generate&nbsp;the&nbsp;.ani&nbsp;file&nbsp;because&nbsp;of
its&nbsp;damage.&nbsp;However,&nbsp;if&nbsp;you&nbsp;reverse&nbsp;engineer&nbsp;.ani&nbsp;file,&nbsp;you&nbsp;will&nbsp;know&nbsp;how
could&nbsp;I&nbsp;produce&nbsp;this&nbsp;exploit&nbsp;in&nbsp;10&nbsp;minutes.

I&nbsp;will&nbsp;describe&nbsp;this&nbsp;vulnerability&nbsp;and&nbsp;how&nbsp;to&nbsp;exploit&nbsp;it&nbsp;in&nbsp;my&nbsp;blog&nbsp;
after&nbsp;M$&nbsp;released&nbsp;patch.

http://www.milw0rm.com/sploits/04012007-ani.zip

02 Apr 2007 00:00Current

7.1High risk

Vulners AI Score7.1