News - Nuova vulnerabilità in Microsoft Live Messenger

**Chill-Out** · 26-09-2007, 09:47

Fonte: SecurityFocus
http://www.securityfocus.com/bid/25795

Windows live Messenger malformed file overflow DoS remote exploitation.

Windows live Messenger malformed file overflow remote exploitation.
(windows ole32.dll ms07-024) (windows GDI MS07-046 )
vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview
Advisore: http://lostmon.blogspot.com/2007/09/
windows-live-messenger-jpg-overflow.html
Vendor notify:YES Vendor Confirmed:yes(DoS issue) Explotation include:YES
A buffer overflow exists in Windows MSN Live. The GDI engine fails
to representate malformed data in image files resulting in a buffer
overflow. With a specially crafted jpg or wmf or gif file or doc
file or ico, an attacker can cause arbitrary code execution
(not Shure RCE) or a DoS resulting in a loss of integrity.
After install this patch for a vulnerability in windows GDI
MS07-046 i make several probes with some malformed image files
(jpj,gif,wmf,ico,doc) and i have the same result before i install
this patch and after install it.
All of this versions and Windows MSN live 8.1
I don´t know if other versions of windows are prone
vulnerables too , but i think that is vulnerable
all systems related in MS07-046 Microsoft Bulleting.

win xp media Center version 2002 service pack 2
Win XP pro
Win XP home
No solution was available at this time, but

DON´T SHARE ANY FOLDER IN MSN UTIL
HAVE A SOLUTION OR PATCH !!!!!!

The vendor planing address this issue
in the next service pack.

c.m.g · 26-09-2007, 09:58

grazie per la segnalazione

**Chill-Out** · 26-09-2007, 10:03

Quote:

Originariamente inviato da c.m.g

grazie per la segnalazione

grazie a te per le altre segnalazioni.

Gianky....! :D :) · 26-09-2007, 10:47

Grazie a entrambi!

Io nel frattempo lo aggiungo nella lista di applicazioni da far proteggere a comodo memory guardian

Ciao

lancetta · 26-09-2007, 17:11

grazie c.m.g. sempre guardingo e attento

BEY0ND · 26-09-2007, 17:59

Quote:

Originariamente inviato da lancetta

grazie c.m.g. sempre guardingo e attento

ehm...forse ti sei confuso...

cmq io il messenger non lo uso da 4 mesi

26-09-2007, 09:47	#1
Chill-Out Moderatore Iscritto dal: Jun 2007 Città: 127.0.0.1 Messaggi: 25885	News - Nuova vulnerabilità in Microsoft Live Messenger Fonte: SecurityFocus http://www.securityfocus.com/bid/25795 Windows live Messenger malformed file overflow DoS remote exploitation. Windows live Messenger malformed file overflow remote exploitation. (windows ole32.dll ms07-024) (windows GDI MS07-046 ) vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview Advisore: http://lostmon.blogspot.com/2007/09/ windows-live-messenger-jpg-overflow.html Vendor notify:YES Vendor Confirmed:yes(DoS issue) Explotation include:YES A buffer overflow exists in Windows MSN Live. The GDI engine fails to representate malformed data in image files resulting in a buffer overflow. With a specially crafted jpg or wmf or gif file or doc file or ico, an attacker can cause arbitrary code execution (not Shure RCE) or a DoS resulting in a loss of integrity. After install this patch for a vulnerability in windows GDI MS07-046 i make several probes with some malformed image files (jpj,gif,wmf,ico,doc) and i have the same result before i install this patch and after install it. All of this versions and Windows MSN live 8.1 I don´t know if other versions of windows are prone vulnerables too , but i think that is vulnerable all systems related in MS07-046 Microsoft Bulleting. win xp media Center version 2002 service pack 2 Win XP pro Win XP home No solution was available at this time, but DON´T SHARE ANY FOLDER IN MSN UTIL HAVE A SOLUTION OR PATCH !!!!!! The vendor planing address this issue in the next service pack. __________________ Regole di Sezione ▪ Guida alla Disinfezione ▪ Attenzione: Thread importanti Try again and you will be luckier. Ultima modifica di Chill-Out : 26-09-2007 alle 10:04.

26-09-2007, 17:11	#5
lancetta Senior Member Iscritto dal: Feb 2007 Città: Salerno...... Messaggi: 3259	grazie c.m.g. sempre guardingo e attento __________________ Opera disabilitazione script ed iframe Recuperare le proprie password on line. Messenger: massima attenzione ai SITI TRUFFA \| GUIDA:ShutdownTimer (Spegnimento auto pc) \| Quando il centro sicurezza non riconosce i soft. Guida a Malwarebytes' Anti-Malware = tiemp bell e na volta...

26-09-2007, 09:58	#2
c.m.g Senior Member Iscritto dal: Mar 2006 Messaggi: 22121	grazie per la segnalazione

26-09-2007, 10:47	#4
Gianky....! :D :) Bannato Iscritto dal: Sep 2006 Città: Palermo Messaggi: 1241	Grazie a entrambi! Io nel frattempo lo aggiungo nella lista di applicazioni da far proteggere a comodo memory guardian Ciao

Strumenti
Mostra una versione stampabile Invia questa pagina per email