Re: BO in http://rad.msn.com/ADSAdClient31.dll

[Thierry Zoller <Thierry () sniff-em com>]

Dear Dan Becker,


DB>  view the source ... its an img tag
I haven't said otherwise.

We are speaking about a (yet to be proven) BufferOverflow and you
send a string the dll produces t some stage...

Scott Edwards asked for "the actual dll" as reply you send a file
which in fact is just a string. We (would) need binary here for it to
be usefull.


-- 
Thierry Zoller


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/