Microsoft Windows XP/Vista - Animated Cursor '.ani' Remote Overflow

EDB-ID:

3634


Author:

jamikazu

Type:

remote


Platform:

Windows

Date:

2007-04-01


Become a Certified Penetration Tester

Enroll in Penetration Testing with Kali Linux , the course required to become an Offensive Security Certified Professional (OSCP)

GET CERTIFIED

..::[ jamikazu presents ]::..

Windows Animated Cursor Handling Exploit (0day)

Works on fully patched Windows Vista
I think it is first real remote code execution exploit on vista =)

Tested on:
Windows Vista Enterprise Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows Vista Ultimate Version 6.0 (Build 6000) (default installation and UAC enabled)
Windows XP SP2 
(It also must to work on all nt based windows but not tested)

Author: jamikazu 
Mail: jamikazu@gmail.com

Bug discovered by determina (http://www.determina.com)

Credit: milw0rm,metasploit, SkyLined, http://doctus.net/

invokes calc.exe if successful 


https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3634.zip (04012007-Animated_Cursor_Exploit.zip)

# milw0rm.com [2007-04-01]