David LeBlanc's Web Log

Back in February, 2008, I posted on DLL preloading attacks and how to avoid them here . It seems that the problem has recently gotten a lot of attention – currently called "Binary Planting". You can read more about that at the MSRC blog , the SWI...

The Security Research and Defense blog detailed an integer overflow here . The code looks like this: case DBT_DEVTYP_PORT: pPortW = (PDEV_BROADCAST_PORT_W)lParam; if ((1+wcslen( pPortW->dbcp_name ))*sizeof(WCHAR) + FIELD_OFFSET(DEV_BROADCAST_PORT_W...