Need Help. CVE-2011-1999

[bcushion]

I want the cve-2011-1999 crash poc. No need for bypassing aslr and dep. Just modify the eip. And if there is any info about that please tell me.
Sorry for my poor english, and thank you for reading.


An article about that:
http://ifsec.blogspot.com/2012/02/reliable-windows-7-exploitation-case.html

[Kulverstukas]

The link is broken bro.

[Z3R0]

If you're wanting to change eip, you'll need to find an opcode from a library that the application uses.

[bcushion]

The link is broken bro.

Sorry for that. I have correted.

[bcushion]

If you're wanting to change eip, you'll need to find an opcode from a library that the application uses.

I am sorry that I don't understand your idea.

[Z3R0]

I am sorry that I don't understand your idea.

Thank you for the -1, I don't tend to get butthurt easily, but in your case I will make an exception. If you didn't understand what I just said to you, then you obviously do not have the skill to understand how to modify exploits, and I'm further going to assume you wouldn't know where to begin, and even further by assuming you don't know how they work. Do you even know what application this is for, or how you would attack with it?

Oh yeah, FYI, the link for the POC that the author was using was posted at the end of his article, maybe if you took the time to read it, and even begin to understand what the article was even about you would know that (he was talking about alternate methods for bypassing ASLR and DEP). Now get the fuck off my nuts you faggot. -1 for being a complete fucking idiot.

[ande]

Thank you for the -1, I don't tend to get butthurt easily, but in your case I will make an exception. If you didn't understand what I just said to you, then you obviously do not have the skill to understand how to modify exploits, and I'm further going to assume you wouldn't know where to begin, and even further by assuming you don't know how they work. Do you even know what application this is for, or how you would attack with it?

Oh yeah, FYI, the link for the POC that the author was using was posted at the end of his article, maybe if you took the time to read it, and even begin to understand what the article was even about you would know that (he was talking about alternate methods for bypassing ASLR and DEP). Now get the fuck off my nuts you faggot. -1 for being a complete fucking idiot.

I am sorry to say this m0rph, but he couldent have given you the -1. You have to have at least 10 posts to give karma.

[bcushion]

Thank you for the -1, I don't tend to get butthurt easily, but in your case I will make an exception. If you didn't understand what I just said to you, then you obviously do not have the skill to understand how to modify exploits, and I'm further going to assume you wouldn't know where to begin, and even further by assuming you don't know how they work. Do you even know what application this is for, or how you would attack with it?

Oh yeah, FYI, the link for the POC that the author was using was posted at the end of his article, maybe if you took the time to read it, and even begin to understand what the article was even about you would know that (he was talking about alternate methods for bypassing ASLR and DEP). Now get the fuck off my nuts you faggot. -1 for being a complete fucking idiot.

I should reply earlier, but my account was locked since I modified my email. I can login just now.

 I am new here. I don't even konw how to give others -1. Whatever, I apologize for making you so unhappy.

[cat_vs_mouse]

Code: [Select]

http://seclists.org/bugtraq/2012/Feb/178

Hope this helps...

[Z3R0]

I am sorry to say this m0rph, but he couldent have given you the -1. You have to have at least 10 posts to give karma.

Sorry, trolled myself lol, I wasn't having a good day (IRL drama), I apologize. bcushion, I hope you can forgive me. <3

[bcushion]

Sorry, trolled myself lol, I wasn't having a good day (IRL drama), I apologize. bcushion, I hope you can forgive me. <3

Take it easy.

[bcushion]

Code: [Select]

http://seclists.org/bugtraq/2012/Feb/178

Hope this helps...

Thank you for help.
I had searched seclists.org. And that is where my offered link come from. But as the author said "One tiny detail required for triggering the vulnerability has been removed, so the exploit (as given below) should not work, even on vulnerable systems. ".  I am not experienced. I can't make the poc work. So I asked help here. I hope any other could make it work or provide more info aout that.
Sorry for my poor english again.

[cat_vs_mouse]

Then you're gonna have to spend some time debugging the code  . Gd luck.