Re: [Full-Disclosure] Re: [sec-labs] Adobe Acrobat Reader <=5.0.7 Buffer Overflow Vulnerability + PoC code

From: Paul Szabo (pszat_private)
Date: Mon Jul 07 2003 - 18:08:47 PDT

  • Next message: Erik Jacobson: "Re: Trillian Remote DoS" 

    KF <dotslashat_private> wrote:

>>     sec-labs team proudly presents:
>>     Buffer overflow vulnerability in Adobe Acrobat Reader 5.0.7 ...
>>     There is buffer overflow vulnerability in WWWLaunchNetscape function.
>>     ...
> 
> I could not reproduce this ... on linux ...
> 
> I was instead old "A browser has not been specified. Do you want to
> configure Weblink Prefrences?"  I set the browser to mozilla and had
> no luck with the overflow... just a mozilla mail with a HUGE mail to: line.

Set your browser to Netscape, not Mozilla.

Cheers,

Paul Szabo - pszat_private  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

    This archive was generated by hypermail 2b30 : Mon Jul 07 2003 - 19:00:24 PDT