Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
1–10 of 56 posts
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#2Wow. It seems as if this has been discovered by rigorous manual inspection of the code (as opposed to just fuzzing the binary to death).
Hats off!
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#3Wow. It seems as if this has been discovered by rigorous manual inspection of the code (as opposed to just fuzzing the binary to death). Hats off!
I'm sorry to disappoint you :)
I discovered this via a coverage based fuzzing engine with a dictionary (containing those magic numbers). Said fuzzing engine is similar to libFuzzer, but I have designed it with a focus on fuzzing closed source Windows binaries (PE).
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#4I bet Avast is far from the only software that will get really confused with so many magic numbers in a row like this.
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#5You sir are a genius. Hoping for more posts of a similar nature and bookmarking now.
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#6You sir are a genius. Hoping for more posts of a similar nature and bookmarking now.
Wow, thanks! That means a lot to me. Honestly, I didn't expect this to interest anyone.
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#7You sir are a genius. Hoping for more posts of a similar nature and bookmarking now.
Wow, thanks! That means a lot to me. Honestly, I didn't expect this to interest anyone.
I am a novice programmer and as novice programmers go, I am interested in everything tech and coding as much as I can understand. Takes a while to understand but uniquely interesting.(Read - never read something in this field)
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#8Take a lesson - always write parsers in C and then execute them as root, and be sure to send as much malicious content to them as possible. Bonus points for hooking it up to the internet.
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#9Take a lesson - always write parsers in C and then execute them as root, and be sure to send as much malicious content to them as possible. Bonus points for hooking it up to the internet.
Addicionally ignore all the advices given by the Algol community since the 1960's, in spite of the fact the customers were more than happy with the output of their compilers.
Re: Avast Antivirus Remote Stack Buffer Overflow with Magic Numbers
#10You sir are a genius. Hoping for more posts of a similar nature and bookmarking now.
Wow, thanks! That means a lot to me. Honestly, I didn't expect this to interest anyone.
Your post is also featured on one of Germany’s largest tech blogs, btw. Seems like everyone is suddenly interested in this :)