4 ms·
You can offer .rdp files for download and they will automatically open in the app. The app will tell you not to open untrusted files but the warning is not too
by tinus_hn 5y ago
You can offer .rdp files for download and they will automatically open in the app. The app will tell you not to open untrusted files but the warning is not too scary.
- belltaco 5y agoIt needs to transfer 4GB over the wire first.
- tinus_hn 5y agoWith compression that doesn’t have to be a big hurdle.
- malcolmst 5y agoIt doesn’t actually have to transfer all 4GB, since you’re just spoofing a header to claim that 4GB is available. The actual payload can be much smaller (like a few kB)
- malcolmst 5y agoI was trying to use this same vuln for information disclosure since it also has an out-of-bounds read due to that lack of validation, but couldn’t get the extra data to be transferred back to the server. Would’ve been a nice way to defeat ASLR if it had worked
- deleted 5y ago[deleted]