Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: DLL hijacking with Autorun on a USB drive
From: Larry Seltzer <larry () larryseltzer com>
Date: Thu, 26 Aug 2010 22:53:41 -0400

Instead of it executing "wab.exe (Windows Address Book) and open the
file test.vcf", one can directly get any .exe file open.

Users have shown themselves very willing to open up test.vcf.exe.

LJS

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]