inTulsa
Premium
join:2002-02-24
| Re: Windows MetaFiles still vulnerable said by justsomebodynew :
Some people just do not get it.
This is not a bug in windows. This WMF feature being exploited is included in all versions of Windows. It is a design decision by Microsoft that allows WMF files to execute arbitrary code.
Nope. The SETABORTPROC was designed and intended for 16-Bit Windows. It's a deprecated piece of garbage that isn't supposed to be used any longer. But now we know it's still there, even Win 2003, in all of its former glory.
said by »msdn.microsoft.com/library/defau···0d6b.asp :
The following printer escapes are obsolete. They are provided only for compatibility with 16-bit versions of Windows.
That's the section where you'll find the SETABORTPROC vector.
If the "design decision" by Microsoft was to keep 16-bit security issues compatible in all its current and future versions, then we are indeed doomed. I prefer to think it might be a "mistaken oversight" instead of a "design decision". |
