Re: SEH and overwrite EIP
Savio <[email protected]> Sat, 8 Dec 2007 00:54:43 -0200
| Newsgroups | gmane.comp.security.vulnerabilities |
|---|---|
| Organization | XORed Labs |
| Message-ID | <[email protected]> |
On 30 Nov 2007 18:38:15 -0000 [email protected] wrote: > Hello, > > > I have simple question: assume that there is a buffer overflow > vulnerability in some program, assume that I want to exploit it. Is > it big difference beetwen overwriting SEH and EIP? > Yes, because you need some special conditions in order to take advantage of an overwritten SEH pointer. Besides, your goal when you overwrite SEH is to write arbitrary values to EIP. Keep digging and you'll spot the difference. :-) -- Savio