Thursday, October 9, 2008

MS Windows GDI+ Proof of Concept (MS08-052) Version 2

John Smith from EvilFingers released the second version of MS Windows GDI+ Proof of Concept (MS08-052). This can be found at http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability_ver2.txt. The entire list of PatchTuesday PoC's can be found here. PatchTuesday Analysis page can be found at http://www.evilfingers.com/patchTuesday/analysis.php, where Ion Visser published an analysis document on analysis of MS08-053 Windows Media Encoder wmex.dll ActiveX Control Buffer Overflow. Ion is also coming up with overall analysis document on the GDI+ PoC's that released last month and that will be releasing in future.

If you have any questions regarding this or any other stuff, contact us at contact.fingers @ gmail.com.

- EF

No comments: