News for hackers. Stuff that matters.

A comment on Critical: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution. Parent comment

Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by huhtenberg on Thursday September 10, 2009 @11:40AM (#815447)
There is a good chance that they just put the pointer itself in a timestamp field, presumably allowing the responder to tweak it to point at something else.
[ Parent | on HN ]
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by tptacek on Thursday September 10, 2009 @12:23PM (#815545)
My read of the advisory was that it's a memory lifecycle issue --- having to do, as the advisory said, with not cleaning up state properly. Which, come to think about it, suggests that it's TCP timestamps --- IP timestamps are stateless.
[ Parent | on HN ]