Showing posts with label Windows XP. Show all posts
Showing posts with label Windows XP. Show all posts

Wednesday, 16 January 2013

Vulnerability Research into CVE2012-1852




I'm currently working on a project for my Msc in Computer Security to investigate CVE2012-1852, which is a vulnerability within Windows XP and the mechanism for discovering other computers located on the network.  It means that a Windows XP machine can be compromised just by opening a list of networked computers. 


Thursday, 10 January 2013

Null Terminated String Copy





Research into a heap buffer overflow error in Windows XP version of NetApi32.dll reveals that the code is using a null terminated string copy.  The patched version of the same dll shows that the copy code has been replaced by a better function that checks the size of the destination buffer.