<HTML>
<HEAD>
<TITLE>Re: [Full-disclosure] [CKA-001] Your Chat underflow vulnerability</TITLE>
</HEAD>
<BODY>
<FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
On 4/19/08 8:36 PM, "Andrew A" <gluttony@gmail.com> wrote:<BR>
<BR>
</SPAN></FONT></FONT><BLOCKQUOTE><FONT SIZE="4"><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Risk assesssment:<BR>
There is a critical level of softness in your chat, which can lead to exploitable chat underflows in many circumstances.<BR>
<BR>
Exploit mitigation:<BR>
see attached photo for instructions.<BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT></FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:9pt'>_______________________________________________<BR>
Full-Disclosure - We believe in it.<BR>
Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><BR>
Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/</a><BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:9pt'><BR>
Note the Mac screen saver in the background ;) Score one for social engineering :D</SPAN></FONT>
</BODY>
</HTML>