scavenger hunt
Results 1 to 3 of 3

Thread: scavenger hunt

  1. #1

    scavenger hunt

    ok, for one of our classes we have to list one of the buffer overrun vulnerabilities, "how it happens" and what the fix would do for the latest version of IE. i've looked in the IE fixes and all they say are "fixes buffer overrun vuln for IE" but doesn't go into detail about how.

    if anyone who happens to know would help, that would be wonderful.
    -=[t]P=-
    \"People should not be afraid of their governments. Governments should be afraid of their people.\" - V

  2. #2
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,191
    I am afraid that at that level my eyes tend to glaze over

    You might look at the EEYE, BUGTRAQ, CERT and CIAC sites though? There are frequently links to more detailed explanations there

    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  3. #3
    Senior Member
    Join Date
    Oct 2002
    Posts
    1,130
    If you want to learn how buffer overflows actually work, I would recommend reading Smashing The Stack For Fun And Profit. It is the authoritative paper on the subject.

    But your teacher may only be looking for a description of which buffer/variable is overflowed and specifically how it is made to overflow, and not all the nitty gritty technical details about what happens after the fact. As nihil said, the bugtraq, cert, cve, and such sites are excellent places to find the internals of a vulnerability.
    Government is like fire - a handy servant, but a dangerous master - George Washington
    Government is not reason, it is not eloquence - it is force. - George Washington.

    Join the UnError community!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •