Computer Security - Microsoft HLINK.DLL Link Memory Corruption Vulnerability

06-23-2006, 04:43 AM

"Microsoft HLINK.DLL is prone to a memory-corruption vulnerability. This
issue is due to the library's failure to properly bounds-check
user-supplied input before copying it to an insufficiently sized memory
buffer.

Successfully exploiting this issue allows attackers to execute arbitrary
machine code in the context of applications that use the affected library.
This facilitates the remote compromise of affected computers. Failed
exploit attempts will likely crash targeted applications.

This issue has been shown to be exploitable through Microsoft Excel files.
Other applications using the affected library may also be affected."

http://www.securityfocus.com/bid/18500/discuss

Imhotep

--
*************************************
Pass a Net Neutrality Law in the US!!!!

Save the Internet:
http://www.savetheinternet.com/

Its our net:
http://www.itsournet.org/

*************************************

imhotep

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
The summary of cancelled Microsoft exams before March 2008	zhang	Software	1	06-12-2008 04:03 AM
Computer Security	aldrich.chappel.com.use@gmail.com	A+ Certification	0	11-27-2007 02:11 AM
OT: Certifications... Worth it?	Michael D. Alligood	MCTS	12	04-10-2007 10:16 PM
OT: Certifications... Worth it?	Michael D. Alligood	MCITP	12	04-10-2007 10:16 PM
Re: Question about MS critical updates	John Coode	A+ Certification	0	06-30-2004 06:08 PM

06-23-2006, 04:43 AM	#1
	Microsoft HLINK.DLL Link Memory Corruption Vulnerability "Microsoft HLINK.DLL is prone to a memory-corruption vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to execute arbitrary machine code in the context of applications that use the affected library. This facilitates the remote compromise of affected computers. Failed exploit attempts will likely crash targeted applications. This issue has been shown to be exploitable through Microsoft Excel files. Other applications using the affected library may also be affected." http://www.securityfocus.com/bid/18500/discuss Imhotep -- *********************************** Pass a Net Neutrality Law in the US!!!! Save the Internet: http://www.savetheinternet.com/ Its our net: http://www.itsournet.org/ *********************************** imhotep