Home :: Blogs :: dennis's blog

CVE-2009-1979 PoC (CPUoct2009)

dennis - Fri, 10/30/2009 - 13:23

This vulnerability was ranked 10.0 (for Windows) in CPUoct2009 and related to improper AUTH_SESSKEY parameter length validation.

(Executable + source code)

Comments

Anonymous - Thu, 11/19/2009 - 23:37

I tried this example, but I don't see the overflow.
Did you only overwrite a few bytes in the example or?