[36034] in bugtraq
Airpwn & libpng holes
daemon@ATHENA.MIT.EDU (Matt Venzke)
Sat Aug 7 13:25:23 2004
Message-ID: <2b8fc573040806181739e5e3e0@mail.gmail.com>
Date: Fri, 6 Aug 2004 18:17:00 -0700
From: Matt Venzke <mvenzke@gmail.com>
To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Has anyone seen any exploit images based on the libpng hole capable of
more than just crashing the system yet?
I was trying to figure if airpwn
(https://sourceforge.net/projects/airpwn/) could be used to do much
more than simply annoy people, and it occured to me that if anyone has
managed to craft truely malicious PNGs, they could easily use airpwn
to distribute them en masse, with the user-agent helping them figure
out which image to send, even if that wouldn't always be reliable...
Not that this is unique--I suppose you could also distribute malicious
bitmaps to anyone still using older versions of IE, or to distribute
any other sort of similarly malicious content.
All the more reason to convince people to secure their wireless
networks and update their software, I guess.
- Matt
