Home › Blogs › dennis's blog

CVE-2009-1979 PoC (CPUoct2009)

Fri, 10/30/2009 - 13:23 — dennis

This vulnerability was ranked 10.0 (for Windows) in CPUoct2009 and related to improper AUTH_SESSKEY parameter length validation.

(Executable + source code)

Comments

Thu, 11/19/2009 - 23:37 — Anonymous

tested it

I tried this example, but I don't see the overflow.
Did you only overwrite a few bytes in the example or?