Full Disclosure: Re: New GDI exploit

["morning_wood" <se_cur_ity () hotmail com>]

reverse successfull...

m.wood

> Game over...
>
> So the exploit is out that will open a local command prompt on the
> machine exploiting the GDI library..
>
> This thing allows 2500 bytes of shellcode..
>
> How long before this turns nasty?
>
> Seems easy to me to make it reverse shell...
>
>
> --------
>
> The problem I have is patching with SMS. MBSA won't pickup the needed
> patched in SMS so you have to push out to all machines in a container
> for a certain software type-
>
> IE
> XP
> VIsio
>
>
> blah blah so on....
>
> ------------
>
> The cycle continues..
>
> JP
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html