morph3us.org

Entries from April 2006

Quicksearch

Categories

Syndication

Tagged entries

"Exploiting" Windows Spider Solitaire

  (Friday, April 21. 2006)
Yesterday I could not fall asleep immediately so I decided to test some applications which are by default included in Windows. I had a look at the Windows games (Freecell, Hearts, Minesweeper, Pinball and so on) and during fooling around a feature namely saving game scores of Spider Solitaire sparked my interest in having a deeper look at it.
You can not choose the file where to save the highscore in and you overwrite the stored highscore everytime you save another game so I started Filemon and found the file `spider.sav' which is located at "%USERPROFILE%\Own Files".

Continue reading this entry..
Comments (2) | Trackbacks (0)

New advisories..

  (Wednesday, April 5. 2006)
Unfortunately, my last blog entry was almost three weeks ago so it's time for a new entry..

Presumably, I'm going to release several new advisories next week. Two advisories will cover multiple stack based overflows in W3C's browser Amaya, three advisories are about DoS vulnerabilities in the latest release of Internet Explorer 6 SP2 with all patches applied and another advisory will deal with multiple vulnerabilities in a rather unknown web application - but I'm not sure yet if I'll publish this advisory this time.

So stay tuned..
Comments (0) | Trackbacks (0)
(Page 1 of 1, totaling 2 entries)