PoC Section - PatchTuesday Page

We now have a patchTuesday Proof-of-Concept release page for the helpers to release 0day's on patchTuesdays. John Smith just released an 0day in this section. For more Click Here.

- EF

XCon joined EvilFingers Media Partner List

Hi readers,

We are proud to announce that XCON is our new MEDIA partner. We are glad that our media partners have increased starting from the great magazine Hakin9 and now pairing with the great conferences such as DeepSec 2008, HITB 2008, POC 2008 and now XCon 2008. POC is offering free admissions to EvilFingers team too.

If you gave any questions regarding these conferences, feel free to contact the conference teams. They are the most active and really welcoming community we have ever seen.

Contact us at contact.fingers (@) gmail.com if you have any other questions.

- EF

Welcome John Smith!!!

John Smith is our new guy in EvilFingers community. He is now working on the patchTuesday page of EvilFingers community portal. He had some interesting studies on the most recent patchTuesday.

Ion Visser is collaborating with Mr.Smith to analyze the PoC that he is coming up with for pT page. This will be releasing soon at www.EvilFingers.com.


- EF

EvilFingers made the news once again

ZDNET has published a blog on Google Chrome POC released by EvilFingers on the 23rd Sep 2008. This is the second consecutive DoS released at EvilFingers. Aditya K Sood(Founder of Secniche Security), Team lead of EvilFingers has released the Google Chrome Carriage Return Null Object Memory Exhaustion Remote DoS. First Google Chrome POC was also release by EvilFingers and it made the news at ZDNET, and this was released by Rishi Narang.

EvilFingers is proud to have such team leads who could inspire the whole team and is also thanking the media for all their support. Thanks to Dancho for considering the postings on EvilFingers.

- EF

Microsoft New Downloads: Un-patched

I was researching on some Microsoft stuff & patches and downloaded Media Encoder software. I was worried about the fact that it will be "patched" and I will have to look for a "un-patched" version to get my hands on the vulnerable wmex.dll (9.0.0.2980).

After installing it, I was surprised to see it having a *.2980 version instead of a patched one! Then I downloaded the patch, extracted the files and got the newer *.3359 version. I don't know much about the corporate policies, but I feel, any software by Microsoft should be a "newer" version, specially after the patch tuesday vulnerability exposure!

To me it surely came as a shock in a "goodish" way ;)

/best wishes/
- Ion

Second Google Chrome POC

The Second POC for Google Chrome released by a EvilFingers Team lead was released yesterday and it still spikes up the Processor for memory utilization and crashes Chrome.

The advisory can be found here.

Warning!!! This is for educational use only.

- EF

To EvilFingers Team

Power Of Community (POC) 2oo8 is offering extended welcome to the EvilFingers team. This conference is going to be held at Korea. Details are available at POC2008. Right now, EvilFingers Team gets free registration for this conference. Kindly, contact contact.fingers {at} gmail.com to get the ticket.

- EF