[B! BufferOverflow] yuzuyu_koroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yuzuyu_koro id:yuzuyu_koro

BufferOverflowã«é–¢ã™ã‚‹yuzuyu_koroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

IEã«0-dayã®ãƒãƒƒãƒ•ã‚¡ãƒ»ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ï¼Ÿ
ç±³å›½æ™‚é–“2æœˆ17æ—¥ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç³»ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒ»ã‚µã‚¤ãƒˆã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ã„ã‚‹ã¨ã€ãªã«ã‚„ã‚‰Internet Explorerï¼ˆIEï¼‰ã«0-dayã®ãƒãƒƒãƒ•ã‚¡ãƒ»ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã€exploitã¾ã§ç™»å ´ã—ã¦ã„ã‚‹ã¨ã®äº‹ã€‚ã‚‚ã—ã“ã‚ŒãŒæœ¬å½“ãªã‚‰ã€ã“ã®å‰ã®WMFè„†å¼±æ€§ï¼ˆIT Proã®é–¢é€£è¨˜äº‹ï¼‰ã®ã¨ãã®ã‚ˆã†ãªé¨’ãŽã«ãªã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ã¨ã¯ã„ãˆã€ä¸€å£ã«ãƒãƒƒãƒ•ã‚¡ãƒ»ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼è„†å¼±æ€§ã¨è¨€ã£ã¦ã‚‚ã€å‰å›žãŠè©±ã—ã¾ã—ãŸã‚ˆã†ã«ãã®ç¨®é¡žã‚„å®‰å®šæ€§ã¯æ§˜ã€…ã§ã™ã€‚ã©ã®ç¨‹åº¦ã®å±é™ºæ€§ãŒã‚ã‚‹ã®ã‹ã¯ã€å®Ÿéš›ã«ãã®è„†å¼±æ€§ã‚’è©³ã—ãè§£æžã—ã¦ã¿ãªã„ã¨åˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚ä»Šã™ãã«ã§ã‚‚æ”»æ’ƒã«æ‚ªç”¨ã•ã‚Œã‚‹æã‚Œã®ã‚ã‚‹ã‚‚ã®ã‹ã‚‰ã€å®Ÿéš›ã®ã¨ã“ã‚ã¯æ‚ªç”¨ãŒé›£ã—ãã»ã¨ã‚“ã©è„…å¨ã«ãªã‚‰ãªã„ã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ã€‚æœ¬å½“ã«å±é™ºãªã‚‚ã®ãªã‚‰ã€ä»Šã™ãä¼šç¤¾ã«è¡Œã‹ãã°ãªã‚Šã¾ã›ã‚“â€¦â€¦ã€‚ ã¨ã‚Šã‚ãˆãšã€ã€ŒSecurity Focusã€ã®ã‚µã‚¤ãƒˆã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹æƒ…å ±ã‚’è©³ã—ãè¦‹ã¦ã¿ã‚‹äº‹ã«ã—ã¾ã—ãŸã€‚ãã‚Œã«ã‚ˆ
yuzuyu_koro 2006/03/28
BufferOverflow

Security
ãƒªãƒ³ã‚¯
2006-02-08
ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒ“ã‚¹ã«ã¦ Windows XP SP1 ãŠã‚ˆã³ Windows Server 2003 ã«ã¦ç‰¹æ¨©ã®ä¸Šæ˜‡ãŒå¯èƒ½ã¨ã®ã“ã¨ã€‚ ã‚ˆã‚Šåˆ†ã‹ã‚Šæ˜“ãå……å®Ÿã—ãŸæƒ…å ±æä¾›ã®ãŸã‚ã€JVN ã‚’ã”åˆ©ç”¨ã•ã‚Œã‚‹çš†æ§˜ã®ã”æ„è¦‹ãƒ»ã”è¦æœ›ã‚’ä¼ºã„ãŸãã€ã‚¢ãƒ³ã‚±ãƒ¼ãƒˆã‚’å®Ÿæ–½ã„ãŸã—ã¾ã™ã€‚ ã ãã†ã§ã™ã€‚ ä»Šã•ã‚‰ãªæ„Ÿã‚‚ã‚ã‚‹ã‘ã©ã€å‚™å¿˜éŒ²ã¤ã„ã§ã«ãƒ¡ãƒ¢ã€‚ WebAppSec XSSã«ã‚ˆã‚Šç™ºç”Ÿã—ã†ã‚‹è¢«å®³ âˆ’ WebAppSec CSRFå¯¾ç–ã‚’ã¡ã‚ƒã‚“ã¨ã—ã¦ã„ã¦ã€ãªãŠã‹ã¤ã‚»ãƒƒã‚·ãƒ§ãƒ³CookieãŒå–ã‚Œãªã„çŠ¶æ³ã§ã‚‚ã€ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå‹•ã‘ã°ãƒ–ãƒã‚°ã®æ›´æ–°ã¨ã‹å‹æ‰‹ã«ã§ãã¡ã‚ƒã†ã“ã¨ã‚‚ã‚ã‚‹ã‚ã‘ã§ã€‚ Windows ä¸Šã§ Unicode ã‚’æ‰±ã†å ´åˆã«ç™ºç”Ÿã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œç‚¹ãªã©ã«ã¤ã„ã¦ä¸å®šæœŸã«æ›¸ã„ã¦ã„ãã“ã¨ã«ã—ã¾ã™ã€‚ä»¥å‰ã®å†…å®¹ã¨é‡ãªã‚‹éƒ¨åˆ†ã‚‚å¤šã„ã§ã™ã—ã€æ™‚é–“çš„ã«ã‚‚ã©ã“ã¾ã§æ›¸ã‘ã‚‹ã‹ã‚ã‹ã‚Šã¾ã›ã‚“ã‘ã‚Œã©â€¦ã€‚ ã•ã¦ç¬¬1å›žç›®ã¯ã€ Window
yuzuyu_koro 2006/02/12
BufferOverflow

Unicode
ãƒªãƒ³ã‚¯
ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®å›žé¿
Table of Contents5.1. C ã‚„ C++ ã®å±é™ºãªã¨ã“ã‚5.2. C ã¨ C++ ã§ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã‚ˆã‚‹è§£æ±ºç–5.2.1. æ¨™æº– C ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã‚ˆã‚‹è§£æ±ºç–5.2.2. é™çš„ã‚‚ã—ãã¯å‹•çš„ã«ç¢ºä¿ã—ãŸãƒãƒƒãƒ•ã‚¡5.2.3. strlcpy ã¨ strlcat5.2.4. libmib5.2.5. C++ std::string ã‚¯ãƒ©ã‚¹5.2.6. Libsafe5.2.7. ãã®ä»–ã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒª5.3. C ã‚„ C++ ã§ã®ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã«ã‚ˆã‚‹è§£æ±º5.4. ãã®ä»–ã®è¨€èªž é »ç¹ã«ç™ºç”Ÿã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å¼±ç‚¹ã¯ã€ã€Œãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã€ ã«å¯¾ã™ã‚‹è„†å¼±æ€§ã§ã™ã€‚ ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã¯ã€Œãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ©ãƒ³ã€ã¨ã‚‚è¨€ã‚ã‚Œã€ã•ã¾ã–ã¾ãª ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼æ”»æ’ƒãŒå˜åœ¨ã—ã¦ã„ã¾ã™(ã€Œã‚¹ã‚¿ãƒƒã‚¯é ˜åŸŸç ´å£Šã€ã‚„ ã€Œãƒ’ãƒ¼ãƒ—é ˜åŸŸç ´å£Šã€ã‚‚ãã†ã§ã™)ã€‚ åŽ³å¯†ã«è¨€ãˆã°ã€ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã¯ãƒ—ãƒã‚°ãƒ©ãƒ ã®å®Ÿè£…
yuzuyu_koro 2006/02/12
Linux

BufferOverflow
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

BufferOverflowã«é–¢ã™ã‚‹yuzuyu_koroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬2é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

BufferOverflowã«é–¢ã™ã‚‹yuzuyu_koroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

IEã«0-dayã®ãƒãƒƒãƒ•ã‚¡ãƒ»ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒ­ãƒ¼ï¼Ÿ

2006-02-08

ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒ­ãƒ¼ã®å›žé¿

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬2é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (3)

BufferOverflowã«é–¢ã™ã‚‹yuzuyu_koroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (3)

IEã«0-dayã®ãƒãƒƒãƒ•ã‚¡ãƒ»ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ï¼Ÿ

ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®å›žé¿

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬2é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹