Board logo

标题: 绿坝3.17远程缓冲区溢出漏洞( xp/sp2 ) [打印本页]

作者: oooooo    时间: 2009-7-10 10:59     标题: 绿坝3.17远程缓冲区溢出漏洞( xp/sp2 )

Green Dam remote buffer overflow exploit

"Green Dam" is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs.
Now it already has 50 million copies in China.
In order to monitor the URL that user is exploring, Green Dam injected the browser process. When Green Dam is trying to handle a long URL, a stack overflow will occur in the browser process.

This exploit can be used for exploitation on IE, on those computers installed Green Dam.
I used the .net binary to deploy shellcode, for it`s more stable than Heap Spray, and able to bypass DEP and ASLR on Vista.
The exploit page contains a .net control, so it should be published on IIS.
---seer[N.N.U]

http://milw0rm.com/sploits/2009-green-dam.zip

# milw0rm.com [2009-06-12]
作者: 1106355123    时间: 2009-7-10 16:48

偶又来顶了
作者: 空梦№残心    时间: 2009-7-10 17:31

我不明白啊。。。。谁讲解下
作者: wyw12340    时间: 2009-8-12 12:15

1# oooooo


不错   继续努力啊




欢迎光临 【3.A.S.T】网络安全爱好者 (http://3ast.com./) Powered by Discuz! 7.2