mersenneforum.org  

Go Back   mersenneforum.org > Other Stuff > Forum Feedback

Reply
 
Thread Tools
Old 2015-02-26, 21:11   #1
TObject
 
TObject's Avatar
 
Feb 2012

34·5 Posts
Cool Attempted User Privilege Gain

Sometimes, when browsing these forums my IDS starts screaming about attempted user privilege gain attacks form the forum's IP.

* Directshow GIF logical width overflow attempt
* Directshow GIF logical height overflow attempt

Could be false positives.

I thought I would let you know...
TObject is offline   Reply With Quote
Old 2015-02-27, 05:59   #2
LaurV
Romulan Interpreter
 
LaurV's Avatar
 
"name field"
Jun 2011
Thailand

2×3×1,667 Posts
Default

Someone might have (intentional or not) malformed gifs as avatars, but I doubt, I assume that your toy doesn't know new (animated?) gif formats, and as it is a common practice for the mods here to play with people's avatars, adding mating unicorns or bully guys to them, , usually by hand, it may be that some errors morphed into the headers of those avatars, making your tool to believe there is a buffer overflow intended... If you add frames to gifs but not modify the headers properly (some tools completely miss to do that!) this can happen. Someone with more rights than me may be able to insulate the problem, if any.
LaurV is online now   Reply With Quote
Old 2015-02-27, 17:25   #3
Xyzzy
 
Xyzzy's Avatar
 
Aug 2002

212516 Posts
Default

http://www.security-database.com/det...=CVE-2013-3174
Quote:
DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."
Xyzzy is offline   Reply With Quote
Reply

Thread Tools


Similar Threads
Thread Thread Starter Forum Replies Last Post
ICC performance gain testi Msieve 5 2008-11-20 03:00
The user CP has gone :( retina Forum Feedback 5 2006-12-05 16:47
no speed gain in Prime95's benchmark when overclocking forcemaker Hardware 8 2006-04-02 15:18
OSX yet? new user here KevinLee Hardware 6 2003-12-12 17:06
5% performance gain running NFSNET + PRIME on a P 4 HT TauCeti Hardware 1 2003-07-02 22:22

All times are UTC. The time now is 04:31.


Wed Aug 10 04:31:30 UTC 2022 up 33 days, 23:18, 1 user, load averages: 1.20, 1.30, 1.35

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.

This forum has received and complied with 0 (zero) government requests for information.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.
A copy of the license is included in the FAQ.

≠ ± ∓ ÷ × · − √ ‰ ⊗ ⊕ ⊖ ⊘ ⊙ ≤ ≥ ≦ ≧ ≨ ≩ ≺ ≻ ≼ ≽ ⊏ ⊐ ⊑ ⊒ ² ³ °
∠ ∟ ° ≅ ~ ‖ ⟂ ⫛
≡ ≜ ≈ ∝ ∞ ≪ ≫ ⌊⌋ ⌈⌉ ∘ ∏ ∐ ∑ ∧ ∨ ∩ ∪ ⨀ ⊕ ⊗ 𝖕 𝖖 𝖗 ⊲ ⊳
∅ ∖ ∁ ↦ ↣ ∩ ∪ ⊆ ⊂ ⊄ ⊊ ⊇ ⊃ ⊅ ⊋ ⊖ ∈ ∉ ∋ ∌ ℕ ℤ ℚ ℝ ℂ ℵ ℶ ℷ ℸ 𝓟
¬ ∨ ∧ ⊕ → ← ⇒ ⇐ ⇔ ∀ ∃ ∄ ∴ ∵ ⊤ ⊥ ⊢ ⊨ ⫤ ⊣ … ⋯ ⋮ ⋰ ⋱
∫ ∬ ∭ ∮ ∯ ∰ ∇ ∆ δ ∂ ℱ ℒ ℓ
𝛢𝛼 𝛣𝛽 𝛤𝛾 𝛥𝛿 𝛦𝜀𝜖 𝛧𝜁 𝛨𝜂 𝛩𝜃𝜗 𝛪𝜄 𝛫𝜅 𝛬𝜆 𝛭𝜇 𝛮𝜈 𝛯𝜉 𝛰𝜊 𝛱𝜋 𝛲𝜌 𝛴𝜎𝜍 𝛵𝜏 𝛶𝜐 𝛷𝜙𝜑 𝛸𝜒 𝛹𝜓 𝛺𝜔