Big News?

[Cabhan]

I am admiteddly somewhat skeptical of this. I (unlike some of you, I know) do not believe that anyone would intentionally do this to an OS.

Now then, from the transcript at http://www.grc.com/sn/SN-022.htm, he believes it intentional due to the following:

So what I found was that, when I deliberately lied about the size of this record and set the size to one and no other value, and I gave this particular byte sequence that makes no sense for a metafile, then Windows created a thread and jumped into my code, began executing my code.

Now then, he says that he has to intentionally lie about it, and give data that would never belong in a Metafile, and only then will the arbitrary code be executed. Isn't that the definition of a bug? Poor exception-handling?

I mean, the Metafile is being looked at, it sees freaky data, gets confused, and therefore executes the code. Just the other day, I had a problem witha program that occurred in only one particular case, due to a simple syntax error in another file.

I cannot believe that this is an intentional vulnerability.

[winter]

I am admiteddly somewhat skeptical of this. I (unlike some of you, I know) do not believe that anyone would intentionally do this to an OS.

Now then, from the transcript at http://www.grc.com/sn/SN-022.htm, he believes it intentional due to the following:


Now then, he says that he has to intentionally lie about it, and give data that would never belong in a Metafile, and only then will the arbitrary code be executed. Isn't that the definition of a bug? Poor exception-handling?

I mean, the Metafile is being looked at, it sees freaky data, gets confused, and therefore executes the code. Just the other day, I had a problem witha program that occurred in only one particular case, due to a simple syntax error in another file.

I cannot believe that this is an intentional vulnerability.

He has a bloody habit of blowing things out of proportion, but this will lead up to some colateral mess for MS

[zacam87]

Hey, by the way were's chopin, i think he would really get a kick out of this one.

i second that one. but aye, i doubt that it was an opensource linux guy that threw this one in there, i an however skepticle about the MS conspericay theory... we'll see what happenes i guess..

[cousinlucky]

Hi Londojowo,

I clicked the link ( http://grcsucks.com/ ) that you posted and after reading the site my Konqueror browser would not connect me to any of my bookmarks. I had to switch to my Opera browser. Do you have any idea why that happened ??

[cousinlucky]

Hi Londojowo,
I visited the link you mentioned ( http://grcsucks.com/ ) and afterward my Konqueror browser would not connect to any of my bookmarks. I had to switch to my Opera browser. Do you have any idea why that happened ?