windows app tables vulnerable

Talk about internet security, computer security, personal security, your social security number...
Post Reply
morganism
Senior Member
Posts: 134
Joined: Tue Nov 26, 2013 9:44 pm

windows app tables vulnerable

Post by morganism »

"In researching new code injection techniques for Windows, enSilo researchers discovered a way that attackers could use to write malicious code into an atom table and force applications using the table to retrieve and execute the code."

http://www.darkreading.com/vulnerabilit ... ?print=yes

"An attacker that gains access to a Windows machine can easily use AtomBombing to inject code to any process that has equal privileges. But it is not a privilege-escalation attack, meaning it cannot be used to inject an administrative account from a non-administrative one
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20130410 Firefox/23.0
yes_noscript

Re: windows app tables vulnerable

Post by yes_noscript »

Whatever.
This is a normal vulnerable and the malware need to be started, so yes. A started malware can and will make damage to the system, period.
No matter what for damage or which exploit.
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:3.0) Goanna/20161025 PaleMoon/27.0.0b3
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: windows app tables vulnerable

Post by Thrawn »

I think an important point here is that the relevant malicious code could be very hard to detect in antivirus or similar scans.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
lindseynicole010
Posts: 1
Joined: Mon May 08, 2017 11:09 am

Re: windows app tables vulnerable

Post by lindseynicole010 »

thanks
Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36
Post Reply