Home page logo

bugtraq logo Bugtraq mailing list archives

Airpwn & libpng holes
From: Matt Venzke <mvenzke () gmail com>
Date: Fri, 6 Aug 2004 18:17:00 -0700

Has anyone seen any exploit images based on the libpng hole capable of
more than just crashing the system yet?

I was trying to figure if airpwn
(https://sourceforge.net/projects/airpwn/) could be used to do much
more than simply annoy people, and it occured to me that if anyone has
managed to craft truely malicious PNGs, they could easily use airpwn
to distribute them en masse, with the user-agent helping them figure
out which image to send, even if that wouldn't always be reliable...

Not that this is unique--I suppose you could also distribute malicious
bitmaps to anyone still using older versions of IE, or to distribute
any other sort of similarly malicious content.

All the more reason to convince people to secure their wireless
networks and update their software, I guess.

- Matt

  By Date           By Thread  

Current thread:
  • Airpwn & libpng holes Matt Venzke (Aug 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]