Thursday, November 02, 2006

Outpost Firewall Vulnerable

Outpost insufficiently protects its driver \Device\SandBox against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send arbitrary data to it, which are implicitly believed to be valid.

View the details and proof of concept [with source code] HERE.

0 Comments:

Post a Comment

<< Home