Re: Re: 3COM TFTPD Overflow: SEH Overwrite

I was asking if ws2_32.dll was compiled with SafeSEH (didn't know about t=
he Olly plugin).  Regarding the return address...I already have control o=
f EIP, but can't point it directly to the stack, so I'm searching for a m=
odule with a suitable return address (with pop/pop/ret) to help me get ba=
ck to that buffer.  The issue was with the return address I was pointing =
to, and the fact that it the module was compiled with SafeSEH.  Is that e=
nough detail? =20