[注意]ANI 漏洞第三方补丁被破[附新的第三方补丁]MS Windows Animated Cursor (.ANI) Remote Exploit (eeye patch bypass)
..::[ jamikazu presents ]::..
Windows Animated Cursor Handling Exploit (0day) (Version3)
Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)
Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows XP SP2
(It also must to work on all nt based windows but not tested)
Update: It also bypass eeye security ani patch!
Author: jamikazu
Mail: jamikazu@gmail.com
Bug discovered by determina (http://www.determina.com)
Credit: milw0rm,metasploit, SkyLined, http://doctus.net/
invokes calc.exe if successful
EXP： 04012007-exp.zip
ZERT出的新补丁： executables.rar
解压密码： ZERT
| DOS下清除熊猫的简单方法 | 02-02 | |
| 杀熊猫烧香100％成功绝招 | 01-27 | |
| 通过电信宽带上网的用户将被电信 | 01-17 | |
| 互联星空挂的一个强马，禁用杀软 | 12-02 | |
| 本周新增5款恶意软件 利字当头顶 | 12-01 | |
| 与世界同步！让你的病毒库备份自 | 11-30 | |
| 番茄花园版XP的安全漏洞兼安全措 | 10-13 | |
| “区域和语言”对Windows系统稳定 | 10-04 | |
| 服务器安全：堵上致命的IISUnico | 10-03 | |
| 游戏里的安全 教你避免帐号被骗和 | 10-01 | |
| Windows Server2003 防木马权限设 | 09-22 | |
| Win2003服务器安全配置终极教程 | 09-21 | |
您现在的位置：